SETROASFLOW — DATA RETENTION POLICY

Version: Draft — 25 August 2026

1. LIVE DATA RETENTION

CDP profiles:

Retained for the lifetime of the applicable Merchant account/project, unless the Merchant requests deletion earlier.

Event records:

Retained for a rolling period of 24 months.

Delivery logs:

7 days.

Test events:

2 days.

Audience activation/sync history:

30 days.

_srf cookie:

Approximately 13 months, subject to browser limitations.

Audience cookie and server-side KV copy:

30 days.

Aggregate usage statistics and advertising-spend records:

No fixed expiration where treated as non-personal operational data.

2. PROJECT DELETION

When a Merchant deletes a project, SetRoasFlow erases the applicable live data associated with that project within 24 hours.

Data already transmitted to third-party destinations is outside SetRoasFlow's direct control and remains subject to the relevant destination's own retention and deletion mechanisms.

3. DISASTER-RECOVERY COPIES

Deletion of live data does not necessarily mean immediate physical disappearance from every provider recovery system.

Cloudflare D1:

Point-in-time recovery (“Time Travel”) is currently enabled with retention of up to 30 days on the applicable Workers Paid configuration.

Cloudflare Durable Objects:

Recovery retention is expected to be approximately 30 days; this specific figure remains subject to technical verification.

Cloudflare KV:

No backup copy is maintained.

Supabase:

The current Free configuration has no automatic database backups. A future Pro configuration may use daily backups with retention of up to 7 days.

Residual disaster-recovery copies are not accessible through normal operations, are not used for ongoing processing and expire automatically under the provider's retention mechanisms.

4. LEGAL REVIEW

The lifetime retention of CDP profiles and event records should be reviewed for GDPR storage limitation and data-minimization requirements. This is a policy/legal question rather than a technical claim.

5. FUTURE CHANGES

SetRoasFlow may introduce more granular or automatic retention controls in future as the product matures.