Targets
The service is designed for up to 25 months of eligible normalised daily aggregates, no more than seven days of transient raw provider responses and up to 90 days of security events unless law or an incident requires longer.
Credentials
Provider refresh credentials are retained only while required for an active connection. Disconnect removes stored credentials and initiates revocation where reliably supported.
Export
An export can include profile, connection metadata, preferences and retained aggregates, never plaintext provider credentials.
Deletion
A confirmed request starts revocation and deletion jobs, ends sessions and removes or de-identifies production personal data subject to backup rotation and lawful retention. Store subscriptions must be cancelled in the storefront.