Data Retention Policy

1. Introduction

This Data Retention Policy explains how Alyssa Howard Enterprises stores, manages, and retains messaging data generated through the use of direct messages and chat rooms on our platform.

This policy supplements our Privacy Policy and applies specifically to messaging data. For general data retention practices covering your account, subscription, and other personal data, please refer to Section 5 of our Privacy Policy.

2. What We Store

When you use our messaging features, we collect and store the following data:

• Message Content: The text and media URLs contained in your direct messages and chat room messages
• Message Metadata: Timestamps (sent, delivered, read), read receipts, and message type (text, image, video, voice, GIF)
• Conversation Records: Information about conversation participants and conversation creation dates
• Reactions and Replies: Emoji reactions and threaded reply data associated with messages
• User Consent Records: Records of when users accepted messaging terms and the version of the Community Guidelines accepted

3. Retention Periods

3.1 Active Accounts

For users with active accounts, messages are retained for the lifetime of the account. You can delete individual messages at any time — deleted message content is replaced with a tombstone indicator ("This message was deleted"), while metadata is retained for moderation audit trail purposes.

3.2 Deleted Messages

When a message is deleted by the sender:

• Message content is replaced with a tombstone indicator immediately
• Message metadata (timestamp, sender ID, conversation ID) is retained to maintain conversation integrity and support moderation
• Associated media is deleted from storage

3.3 Deleted Accounts

When an account is deleted:

• Message content authored by the deleted account is anonymized within 30 days — the message text is retained but attributed to an anonymous user
• Moderation records involving the account are retained per legal and compliance obligations, with identifying information removed where possible
• The account's consent records are retained in anonymized form for legal compliance

4. Media Storage

Media files shared in messages (images, videos, voice recordings) are stored using Supabase Storage in a private, access-controlled bucket. The following retention rules apply:

• Media is retained as long as the associated message and account remain active
• When a message containing media is deleted, the associated media file is removed from storage
• When an account is closed, media uploaded by that account is deleted within 30 days
• GIF content is not stored by us — GIFs are delivered via Klipy API at the time of viewing and are not retained on our servers

5. Moderation Data

To maintain a safe community and comply with platform safety obligations, we retain moderation-related data on the following schedule:

• Content Reports: Retained for 2 years after resolution of the report
• Admin Action Logs: Records of moderation actions taken (warnings, mutes, suspensions, bans) are retained indefinitely for audit compliance and to detect repeat offenders
• Mute and Block Records: Retained for the duration of the block or mute, plus 1 year for audit purposes

6. Your Rights

Subject to applicable law and our legal retention obligations, you have the following rights regarding your messaging data:

• Right to Access (GDPR Article 15): Request a copy of your messaging data, including message content and metadata associated with your account
• Right to Erasure (GDPR Article 17): Request deletion of your messaging data. Note that deletion is subject to legal retention requirements — we may retain moderation records even after a deletion request
• Right to Portability (GDPR Article 20): Request your messaging data in a structured, machine-readable format

To exercise any of these rights, contact us at privacy@alyssaahoward.com. We will respond to verified requests within 30 days (GDPR) or 45 days (CCPA/CPRA).

7. Changes to This Policy

Alyssa Howard Enterprises, LLC reserves the right to update this Data Retention Policy at any time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you via email or a prominent notice on the platform. Your continued use of our messaging features after the effective date of the updated policy constitutes your acceptance of the changes.