Data Retention

Saved scan history and mailbox content currently remain until SteelGaze performs an operational deletion or completes a verified deletion request. Automatic 90-day deletion is not currently enforced.

Account records remain while the account is active and afterward as needed to complete deletion, meet legal obligations, prevent abuse, resolve disputes, or secure the service. Disconnecting Gmail, Microsoft, or IMAP stops future monitoring for that connection but does not automatically delete previously saved scans or mailbox records.

Settings provides controls to download a JSON data export, delete saved scan history, and permanently delete the account after password verification. Disconnecting an inbox stops monitoring but does not erase saved activity; use history deletion or account deletion for that purpose. Backups and legally required records may expire on separate operational schedules.

Opt-in notification preferences and active channel configuration remain while your account is active or until you disconnect them. Redacted delivery history and aggregate worker-run records are removed after 90 days. Short-lived Slack and Telegram connection tokens expire after ten minutes and are cleaned up after expiry or use. Account deletion clears encrypted notification credentials, then removes owned notification metadata through database cascades. JSON export includes sanitized preferences, channel states, and delivery summaries but excludes credentials.

Gmail-derived data is prohibited from general AI/ML model training. Microsoft-derived data is also prohibited from general AI/ML model training. Contribution controls apply only to eligible non-Google/non-Microsoft submissions, are disabled by default, and require explicit consent. Withdrawing a contribution setting stops future contribution and deletes samples associated with that consent.

SteelGaze has scheduled automatic deletion of eligible saved scans and related processing records older than 90 days no earlier than August 26, 2026, after the required notice window. The schedule and supporting controls are present, but automatic enforcement is not yet enabled. This page will be updated after enforcement is activated and verified.