Migration assurance
Data retention and deletion
Source and reports have different lifecycles. Source is not retained; report findings remain temporarily available through a private link.
Submitted source
Pasted source or a ZIP is analyzed for the request and is not written to durable report storage. Source is not retained; it is discarded when processing completes.
Reports
Report findings and metadata are retained for the access period attached to the purchased product: 30 days for Single, 90 days for Bundle and 180 days for each Agency beta project after its first paid scan or unlock. Agency credits expire 180 days after purchase, no new project may be created after credit expiration, and Agency stored report data expires no later than 365 days after pack purchase. Free preview report access is 30 days. A re-scan always requires a fresh source upload.
Hard cleanup timeout
sourceRetentionHours=24 is a hard cleanup timeout for exceptional transient buffers, not the normal source retention period. Normal scan source is discarded when processing completes.
Access and deletion
Reports are guarded by high-entropy access tokens. Manual deletion clears the stored report payload; expired reports are no longer retrievable.
Logs and backups
Operational logs contain reliability and abuse-prevention metadata, not submitted source, evidence snippets or secret values.
Last reviewed: 2026-07-02.
Open the interactive scanner: /app#/data-retention