Legal
Data retention and deletion
How long each kind of record is kept, what deleting a case, an account or an organization removes, and what remains.
On this page
Retention windows
| Record | How long | How it is removed |
|---|---|---|
| Original uploaded files | Your plan's original-file window, counted from upload. Shown on Pricing and in Settings. | Nightly retention job |
| Cases and everything derived from them | Your plan's case window, counted from the case's last activity or analysis. This includes parsed events with the original record text, evidence, findings, notes, closure packages, enrichment results and AI run records. | Nightly retention job, or deletion by a member |
| Ephemeral case originals | Removed right after processing. Parsed events (including the original record text), evidence and findings stay until the case window ends. | Pipeline, after parsing |
| After a plan downgrade | The previous, longer windows stay pinned for a 30-day grace period. | Nightly retention job |
| Audit history | At least 400 days, or your case window if longer. Includes the IP address on sign-in and account security events. | Nightly retention job |
| Copies of delivered handoff notes | 7 days after delivery settles. A record that the note was sent remains. | Nightly retention job |
| Expired or revoked sessions | Removed once expired or revoked. | Nightly retention job |
| Agreement acceptance records | While the account or organization exists, then six years after it is removed or closed. | Scheduled job |
| Anonymous public-page counts (when turned on) | 400 days. | Nightly retention job |
| Product action records, feedback, usage counters | No age-based deletion. Removed when the organization is closed. | Organization closure |
Deleting a case
Owners, and members with edit access to the case, can delete it. Deletion removes the case and everything derived from it, and asks storage to remove its original files first. If storage removal fails, the case is kept and the deletion is reported as incomplete so it can be retried. Closing a case does not delete it.
Removing an account
- A member can leave an organization, which deletes their account; an owner can remove a member. The last owner cannot leave and must close the organization instead.
- Some records keep the email address of the person who acted, after their account is gone: audit history (at least 400 days), case activity and review history, closure packages and delivery records (until the case is deleted), and invitations.
- Product action records and feedback stay, without the link to the account.
- There is no self-service export of everything about an account. Each case can be exported on its own; for anything else, make a privacy request.
To ask for access to or deletion of your personal data, use Make a privacy request. Requests are handled by a person, not automatically, so the result can be checked before anything is removed.
Closing an organization
An owner can close the organization from Settings after confirming their password, any second factor, and the organization's name. Closure cancels any subscription, deletes every case through the same storage-first path, and removes the organization's accounts, provider keys and audit history. What remains: a closure record (identifiers, time, counts and billing outcome), Stripe webhook records with the organization link removed, and agreement records for six years.
NEMUQU does not delete your customer record at Stripe. Stripe keeps its own records under its own terms.
Backups
- Original files have a daily backup copy in a separate bucket. A copy whose original was deleted is removed at least 30 days after a backup run first finds it orphaned, and only after a later run succeeds. That is a minimum, not a guaranteed deadline: a failed or delayed job extends it.
- The database is backed up by the hosting provider on its own schedule. The provider states seven days of daily backups for the plan in use; the production retention has not been independently verified.
- When a case is deleted, a small marker records it so that a restore cannot bring the files back. Markers hold identifiers and times, not evidence, and currently have no automatic expiry.
- Provider logs (hosting, email, payments, AI and enrichment providers) follow each provider's own retention.
Legal holds
There is no legal-hold feature. If you need records kept beyond their window, export them before they expire.
Last updated .