Operational draft, pending qualified counsel review. This page is an operational draft, not a substitute for advice from qualified counsel. Last reviewed 2026-09-10.
1. Per-store schedule
| Store | Retention | Basis |
|---|---|---|
| Email sign-in codes (OTP and magic links) | Expire after 5 minutes; verification values are stored hashed. | Limit abuse of passwordless sign-in. See emailOTP/magicLink expiresIn 300 with hashed storage in lib/auth.ts, and the 5-minute notice in lib/email.ts. |
| Sessions | Valid for up to 30 days; cached session state for up to 5 minutes. Earlier sign-out, revocation, or security action ends them sooner. | Operate and secure accounts. See session expiresIn 60 * 60 * 24 * 30 with a 5-minute cookie cache in lib/auth.ts. |
| Workspace content, including audio recordings and transcripts | Kept until deleted, the account closes, or retention is no longer needed for the service or a dispute. Deleting a project removes its sources and stored objects. Deleting a workspace freezes it at once, waits 72 hours so you can cancel, then removes its records and stored files and issues a receipt of what was removed and what is kept. | Customer instructions and service operation. See deleteStoredProject in lib/create/store.ts and the workspace store inventory and purge in lib/privacy/registry.ts and lib/privacy/deletion.ts; transcripts are document sources in creative_sources (app/api/create/projects/[projectId]/transcribe/route.ts). |
| Billing and transaction records | Retained for applicable accounting, tax, fraud-prevention, and legal periods, including after a workspace is deleted. The deletion receipt lists every retained store and its basis. | Statutory and contractual obligations via the Stripe merchant-of-record checkout. The billing stores kept by a workspace purge are the entries marked billing in lib/privacy/registry.ts. |
| Workspace export archives | A prepared export stays downloadable for 7 days and is then deleted; each download link is signed and valid for 5 minutes. Credentials, token references and signing secrets are never included in the archive. | Data portability with data minimisation. See EXPORT_TTL_MS, EXPORT_DOWNLOAD_TTL_SECONDS and exportExclusions in lib/privacy/export.ts. |
| Signal alert webhook endpoint and signing secret | Encrypted at rest; deleted immediately when webhooks are disabled, and when a workspace deletion completes after its grace period. | Customer instruction and data minimisation. See app/v1/notification-preferences/route.ts (disable clears webhook_reference) and the revoke phase in lib/privacy/deletion.ts. |
| YouTube destination tokens and identifiers | Deleted from Plotmesh when you disconnect the destination (token revocation is requested from Google and stored tokens, account reference, upload session, and identifiers are cleared). Other stored account-data deletion requests are completed as soon as possible and within seven calendar days. | Customer instruction and data minimisation. See app/api/integrations/[id]/route.ts and the Privacy Policy YouTube section. |
| YouTube results read data (separate read-only connection) | Channel credential cleared after about 29 days without refresh; one-off read windows pruned after 1 hour; expired OAuth attempts deleted. | Data minimisation. See RESULTS_CONNECTION_LIFETIME_MS and pruneYouTubeResultsData in lib/publishing/youtube-results-retention.ts. |
| Security, support, and operational records | Retained only as long as reasonably needed for their purpose. | Legitimate interests in operating and protecting the service. |
| Cookie consent choice | Stored on your device until cleared, withdrawn, or replaced. | Consent record kept locally; essential-only by default. |
2. How to request deletion
Email support@plotmesh.xyz from your account email and describe what should be deleted. You can disconnect a YouTube destination yourself from Studio → Integrations at any time; Plotmesh then requests token revocation and deletes the stored connection data. Verified account-data deletion requests are completed as soon as possible and within seven calendar days.
3. What deletion does not cover
Deleting Plotmesh data does not delete videos or other data stored by YouTube or other publishing destinations — use those services to delete content held by them. Billing and transaction records are retained for applicable accounting, tax, fraud-prevention, and legal periods even after an account closes. Completed workspace exports remain with whoever received them; deleting the workspace does not recall copies already delivered.
Operational draft, pending qualified counsel review. This page is an operational draft, not a substitute for advice from qualified counsel.