Legal
Data retention schedule
How long SectraTEK keeps each kind of information it holds in its services.
Version 1.0. Last updated October 21, 2026.
This schedule shows how long SectraTEK keeps each kind of information it holds in its services. It does not cover information on your own workstation, which you control, and it does not cover the evidence you examine, which stays with you. When a period ends, the information is deleted or irreversibly de-identified, subject to the exceptions below. The Privacy Policy explains what we collect and why.
The schedule
| No. | What we hold | What it covers | How long we keep it |
|---|---|---|---|
| 1 | Support bundles | Diagnostic logs that you choose to send for a support ticket | 30 days after the related ticket closes. A bundle that is not attached to a ticket is removed after 7 days. |
| 2 | Ticket text | Support tickets and our replies | 7 years |
| 3 | Usage records | The record each case sends, as listed in the Privacy Policy | The life of the subscription plus 7 years |
| 4 | Installer download records | Who downloaded an installer, and when | 5 years |
| 5 | Audit log | The record of administrative actions in our systems | 7 years, kept in a form that cannot be changed |
| 6 | Hosting account activity logs | The record of activity in our hosting account | 1 year readily available, then 7 years in archive |
| 7 | Database backups | Backup copies of our databases | 35 days, with a protected copy kept separately for the same period |
| 8 | Organization verification documents | Proof that an organization exists and is eligible to buy | 12 months after a request is rejected. For an approved customer, the life of the relationship plus 5 years. |
| 9 | Email delivery log | The recipient address and delivery status of emails we send | 13 months |
| 10 | Newsletter and status email subscribers | Email address, topics, consent record | Until you unsubscribe, plus 30 days |
| 11 | Demo, quote and contact records | The details you give us in a form, and our notes on the request | 3 years, unless the contact becomes a customer |
| 12 | Server access logs | Page requests, browser type and network address | The full network address for 30 days. A shortened network prefix for 13 months. |
| 13 | Consent records | Your cookie choices as recorded by the Site (no name or email) | 13 months |
| 14 | Browser security reports | Reports sent by your browser when a page is blocked from loading something | 90 days |
| 15 | Page performance measurements | Page speed figures sent to our own servers (no name, email or identifier) | 90 days |
| 16 | Web firewall logs | The record of requests our web firewall allowed or blocked | 90 days |
| 17 | Access requests | Requests by colleagues of a customer to join the customer's organization | 3 years, unless the request is converted |
| 18 | Privacy request records | Requests to access, correct, delete or opt out, and our responses | 24 months after the request is closed |
| 19 | Deleted attachments | A ticket attachment deleted by you or by our staff | Removed from view at once, and purged after 7 days |
Exceptions and how deletion works
- Legal holds and legal process. We keep information longer than the period shown when the law requires it, or when a legal hold, dispute or investigation is open. We release it when the reason ends.
- Deletion and erasure requests. If you ask us to delete information that we must keep for a period (for example a usage record, which is part of a license), we tell you what we keep and why. We keep a minimal erasure record, so that information you asked us to delete is not restored from a backup.
- Backups. Deleted information can remain in a backup until the backup expires. If a backup is restored, the erasure record is applied again.
- Testing. We run and log deletion jobs, and we test them, including a restore test that shows the erasure record is applied again.
- Evidence. Devices you examine, evidence and case data are not held by SectraTEK services. Please do not send them to us.
- Customer applications. What a SectraTEK application keeps on your own workstation is described in the license agreement and the product documentation, not here.