Data Retention Schedule
Effective 1 September 2026
This is Squeeza’s default schedule. We may retain a narrowly limited record for longer where required by law, a legal hold, fraud prevention, safety enforcement or the establishment or defence of legal rights. Access remains restricted during any extended retention.
| Information | Default retention |
|---|---|
| Active account, profile and member content | For the life of the account, until the member deletes it or Squeeza removes it under the Terms. |
| Expired authentication sessions | Deleted after expiry, with a maximum seven-day operational cleanup period. |
| Email-verification and password-reset records | Deleted within 30 days after expiry or use. |
| Notifications | Up to 12 months. |
| Rate-limit and abuse-prevention counters | Until their expiry time, generally no more than 48 hours. |
| Resolved reports and moderation actions | Three years after resolution or action, unless a longer safety or legal hold is necessary. |
| Completed privacy requests | Three years after completion to demonstrate handling and compliance. |
| Application and security logs | Target maximum of 30 days in the production logging service, except security incidents under investigation. |
| Database backups | 14 daily backup cycles by default; provider-managed backup retention may differ and will be configured before production launch. |
| Deleted-account data | Removed from the active database immediately through account deletion. Residual encrypted backups expire on the backup cycle unless legally preserved. |
Retention is reviewed at least annually. Contact privacy@mysqueeza.co.za with questions or a lawful deletion request.