Data Retention Matrix
What data we retain, how long we retain it, why it exists, and how deletion flows work.
Last generated: 2026-04-04T02:37:19Z
Retention Rows
| Data | Storage | Retention | Purpose | Delete Path |
|---|---|---|---|---|
| Partner request logs | MySQL: partner_request_logs | 90 day rolling window | Rate-limit analytics, incident triage, abuse investigations. | Nightly cleanup task + admin cleanup preview. |
| Partner webhook delivery events | MySQL: partner_webhook_events | 90 day rolling window | Delivery debugging, replay tracking, partner incident response. | Nightly cleanup task + admin cleanup preview. |
| Partner nonce cache | MySQL: partner_request_nonces | 600 second TTL | Replay protection for signed partner requests. | Auto-expired via TTL cleanup on write path. |
| Partner idempotency keys | MySQL: partner_request_idempotency | 86400 second TTL | Safe retries and replay suppression for mutating endpoints. | Auto-expired via TTL cleanup on write path. |
| Audit anomaly history artifacts | Filesystem: logs/audit_txn_anomalies/history | 120 days | Public transparency trend analysis and historical comparisons. | Scheduled artifact retention pruning. |
| Token distribution snapshots | Filesystem: logs/token_distribution/history | 90 days | Distribution drift tracking and verification history. | Scheduled artifact retention pruning. |
| Security scan history | Filesystem: logs/security_scan/history | 90 days | Security evidence packs and recurring vulnerability trend checks. | Scheduled artifact retention pruning. |
| Ops daily digest snapshots | Filesystem: logs/ops_digest/history | 30 days | Ops handoff continuity and warning fingerprint analysis. | Digest retention wrapper job. |
| Admin 403 digest snapshots | Filesystem: logs/ops_403_digest/history | 30 days | Admin 403 denied/probe trend triage and owner-map tracking. | 403 digest snapshot retention pruning. |
| Preflight guard artifacts | Filesystem: logs/preflight_guards_*.json | 30 days | Release-gate drift evidence and post-incident audits. | Preflight guard artifact retention policy. |
| Account/profile records | MySQL: users, user_wallets | Active-account lifecycle (business/legal policy applies) | Authentication, wallet linking, and core account operations. | Submit request via /contact for support-led account data handling. |