# Data retention policy

> Learn about CloudBolt's data retention policy

---

Site [llms.txt](/llms.txt)

---

This Data Retention Policy document outlines the retention and deletion practices for data ingested into the CloudBolt Platform during the term of service. As part of our commitment to transparency, security, and compliance, this policy governs how data is retained, stored, and deleted. The retention of customer data, including performance telemetry data, is designed to balance operational needs with privacy and legal obligations. This document covers the retention period for different types of data, the data deletion process, and the client rights regarding data retention.

## Duration of Cloud FinOps data retention

This section outlines the data retention policy for the data ingested into the CloudBolt Platform (referred to as the "Platform") during the term of the agreement. The retention of such data is governed by the following terms:

1. **Retention Period**

   During the initial term and any subsequent renewal terms of an order for the CloudBolt Platform (collectively referred to as the "Term"), the data ingested via the Platform's data ingestion capabilities (including APIs and native cloud credentials provided to the Platform) will be retained for a period of **27 months** from the first ingestion timestamp. The data retention period is broken down as follows:

   - **Recent 15 Months:**

     The most recent 15 months of data will be retained with **daily granularity**, meaning that the data will be aggregated and stored on a daily basis. Each summary will represent activity over each 24-hour period for the most recent 15 months from the current date.

   - **Subsequent 12 Months:**

     The next 12 months of data following the most recent 15 months will be retained with **monthly granularity**, meaning that data will be aggregated into monthly summaries. This provides a high-level overview of the activity during the 12-month period following the most recent 15 months.

1. **Performance Telemetry Data**

   Performance telemetry data will be retained for a period of **4 months** with **5-minute granularity**. This data will capture performance metrics at 5-minute intervals for closer monitoring and analysis of system behaviour.

1. **Data Deletion**

   Data will not be retained if the **Customer** deletes it, or if the Customer requests the deletion. Additionally, data will not be retained if the retention period exceeds **30 days after the termination or expiration of the Term**. Once this 30-day period has passed, all data will be permanently deleted from the Platform's systems, unless legal obligations or compliance requirements necessitate a longer retention period.

## Cloud FinOps data deletion process

Once the retention period for customer data has expired or upon termination of the Term, data will be permanently deleted from the CloudBolt systems after 30 days. The data deletion process follows a strict procedure to ensure the secure removal of all data from our systems:

- **Automatic Deletion:** After the expiration of the retention period or the termination of the service term, all customer data will be flagged for deletion and removed from CloudBolt Platform's storage systems within 30 days.
- **Permanent Deletion:** Once the 30-day period has elapsed, data will be permanently deleted from all active systems and backups, ensuring that it is no longer accessible by CloudBolt or any other parties.
- **Compliance Exception:** If any legal or compliance requirements mandate longer retention of certain data, we will retain that data for the required period as dictated by applicable regulations.

## Client rights

Customers have the following rights regarding the retention and deletion of their data:

- **Data Deletion Requests:** Clients have the right to request the deletion of their data at any time during the Term. If such a request is made, the data will be deleted as soon as possible, and retention periods will be adjusted accordingly.
- **Data Access:** Customers may access their data during the Term and for the duration of the retention period as specified in this policy.
- **Retention Extension:** Clients may request longer retention periods for an additional fee. To inquire about extended data retention options, customers should contact their account team for further details.
