Policy

Retention policy

How long message and event history is kept, what a purge actually does, and how to get the data out first.

Draft — not yet reviewed by counsel.

This document says what the product actually does, written by the people who built it. A lawyer has not read it. It is published in this state because a product with no published policy is worse than one with a policy that admits what it is, and it will be replaced by a reviewed version before the first paid contract.

last reviewed 2026-09-17

The number

Message and event history is kept for the days on your plan, then deleted. Starter keeps 30, Pro 90, Scale 180; the 14-day Pro trial keeps Pro's. An account without a plan keeps 7 days — that is also the fallback the purge job uses when a plan is unknown. This page reads that number from the same constant the purge job falls back to, and /retention.json publishes it in machine-readable form.

What is covered

  • Messages: envelope, headers, subject and body.
  • Message events: accepted, delivered, bounced, complained, and opens and clicks if you turned tracking on.
  • The audit log of account changes.

What a purge does

It deletes the rows. Nothing is copied to a colder store first, and there is no archive to request data back from afterwards. Aggregate counters that were already computed — the numbers behind the Metrics screen — survive, because they contain no message content and no recipient address.

What is kept longer, and why

  • Suppressions are kept indefinitely. An address that unsubscribed, hard-bounced or complained stays suppressed; forgetting it after ninety days would mean mailing it again, which is the opposite of what the person asked for.
  • Account records — who the account is, what plan, which domains — live as long as the account does.

Before it goes

GET /account/export returns everything we hold on the account as a zip, including the messages still inside the window. Export before you need it, not after.

Deleting sooner

DELETE /account closes the account. Data ages out on the retention schedule. For a single message or a single recipient's data, write to [email protected] and say which; we do it and confirm.