LLM Retention Settings

Data Retention refers to the duration for which data is stored within the LLM system before it is deleted or anonymized. It’s important to clearly define retention periods to comply with privacy laws and to ensure that data is only kept for as long as necessary.

Policy Details:

  • Retention Duration:
    We retain customer data processed by our LLM for a defined period, typically 30 to 90 days. After this period, data will be deleted or anonymized unless otherwise required for legal, regulatory, or operational reasons.

  • Data Retention Configurations:

    • For Personal Data: Personal data (e.g., name, email) and conversational data are stored for 30 days and then deleted from our active databases. After 30 days, data is moved to backup storage, and may be retained for an additional period for compliance or auditing purposes (typically up to 90 days).

    • For Transient Data: Transient data, such as session information or temporary logs generated during LLM interactions, is retained for a maximum of 7 days.

  • Data Anonymization After Retention Period:
    After the retention period expires, we anonymize customer data where possible. Anonymized data may still be retained for internal analysis, research, and improvement of the LLM models, but it will not contain any personally identifiable information (PII).

  • Automatic Deletion:
    Upon reaching the retention period, customer data is automatically scheduled for deletion. If a customer wishes to retain their data beyond the specified retention period, they must manually opt-in to export or backup their data.

  • Retention for Legal/Compliance Requirements:
    In some cases, we may retain customer data for longer than the standard retention period if required by law (e.g., for audits, compliance investigations, or legal proceedings). In such cases, customers will be notified of the extended retention period and the reasons for it.

  • No Retention for Certain Data:
    We do not retain any sensitive data, such as passwords or payment information, beyond the necessary time for transaction processing or account verification. All such sensitive information is securely deleted once processing is complete.