Data Retention & Deletion Policies
Status
Owner: Tech lead · Status: draft · Canonical source: Flezi Galaxy Codebase
Explains data lifecycles, offboarding procedures, and GDPR Right-to-be-Forgotten compliance.
Retention Schedule by Category
| Category | Default Retention | Deletion Mechanism |
|---|---|---|
| Conversations & Messages | Workspace lifetime | Soft-delete with 30-day permanent purge |
| Files & Documents | User-managed | Immediate purge upon document deletion |
| Streaming Redis Buffers | Max 24 hours | Automatic TTL eviction |
| Sandbox Volumes | Session lifetime (max 2 hours) | Instant container and disk wipe |
| Audit Logs | 365 days | Compliance-gated storage |
Enterprise Offboarding Procedure
Upon contract termination or organization offboarding request:
- Account access is immediately revoked for all organizational members.
- Relational database records cascaded and purged across PostgreSQL.
- Storage blobs associated with the organization container are permanently deleted.
- Formal certificate of data destruction provided upon request.
Existing Controls
- Deletion commands restricted strictly to Organization Administrators and System Administrators.
Evidence (Files & Configuration)
flezi.app.api.backend/app/database/models/flezi.app.api.backend/app/features/workspaces/service.py
Limitations & Roadmap
- Self-service data export packages (JSON/ZIP) for tenant offboarding.