Active data
| Data type | Retention |
|---|---|
| Documents | Indefinite while account exists |
| Memories | Indefinite while account exists |
| Content chunks | Indefinite while account exists |
| Clusters | Regenerated on demand |
| OAuth tokens | Access: 1 hour, Refresh: 30 days |
Automatic pruning
| Data type | Retention window |
|---|---|
| MCP request logs | 90 days |
| Soft-deleted documents | 30 days before hard delete |
Audit logs
Audit entries have a minimum retention of 1 year. The runtime database role can only INSERT into the audit schema (append-only).Account deletion
When a user account is deleted:- All user data removed via
ON DELETE CASCADEforeign keys - Covers: documents, folders, memories, clusters, content chunks, OAuth tokens
- Deletion recorded in the audit log
- Permanent and irreversible
Backups
- Hosted (Railway): Automatic daily snapshots
- Self-hosted: Operator-managed. Recommend daily
pg_dumpwith 30-day rotation