Data retention

In force from 11 November 2026. Last updated 11 November 2026.

Version 2026-11-11.4.

What	Kept for
Session records (who opened a shell, where, when)	90 days after the session ends
Audit events	90 days
Server logs, including IP addresses	30 days
Sent mail and payment events	30 days
Mail you send to our support and privacy addresses	12 months after it arrives, also after you delete your account
Feedback from the account page	Screenshots 90 days, the rest 12 months, or until the account is deleted. Words we copied into our notes stay with that work.
Sign-in sessions	30 days after you sign out or they are revoked
Export and deletion requests	3 years after they are answered, cancelled or expire, also after the account is deleted
Traffic usage counts	13 months
Hashes of IPs you signed in from	30 days after the sign-in
Invoice summaries	Until the team is deleted
Trial email and card hashes	Kept, also after the team or account is deleted
Accounts never verified	7 days after signup
Invitations	30 days after they are used, revoked or expire
Email links (verify, reset, invite)	Valid for 1 hour to 7 days
Addresses that bounce or mark us as spam	Until you ask us to release them
Your account, teams and devices	Until you delete them, then removed at once. Audit events keep your internal id for 90 days, export and deletion requests keep it for up to 3 years, and the deletion mail is kept 30 days.
Database backups	Age out within 30 days

Shell traffic itself is never stored. Stripe and Link keep their own payment records under their own terms.