ComprehendlyRetention schedule — Comprehendly
Provider: UltraDigital Limited
Effective date: 1 August 2026
Version: 1.0
Default retention periods for Comprehendly. Customer configuration may extend retention where the Customer is controller. Legal holds override deletion until released.
| Data category | Default retention | Notes |
|---|---|---|
| Account / tenant admin data | Active term + 1 year | Earlier deletion on verified request where feasible |
| Billing and invoices | 7 years | Tax and accounting |
| Form submissions (Customer Personal Data) | Customer-configured; otherwise until tenant deletion | Processor retention after termination: see DPA |
| Voice consent records | Minimum 3 years | Audit defensibility |
| Optional transcripts | Customer-configured | Off by default unless opted in |
| Raw audio files | Not retained | Real-time processing only |
| Integration / API logs | 90 days | Security and support |
| Security / access logs | Up to 12 months (or longer if investigating) | Least necessary |
| Marketing website analytics | Per Vercel Analytics retention | Aggregated events |
| Demo session data | Demo session operation only | Do not enter real sensitive data |
Jurisdiction guidance for Customers
| Context | Guidance |
|---|---|
| NZ flexible funding receipts/invoices held by Customer | Often 7 years — Customer policy |
| AU NDIS-related evidence held by Customer | Often 5+ years — Customer policy |
| Concern / incident records | Follow Customer legal and safeguarding policy; prefer archive over hard delete |
Contact: privacy@stepcare.app
End of Retention schedule