Retention

Purpose of this page

Explain how long we keep data, when deletion or archiving is triggered, and how we handle backups and legal records. For what we collect and why, see Data & Sources and Purposes & Legal Bases.

Our retention model (no “full purge”)

• Active — Data needed to run your account and the service.

• Legal archive (restricted access) — When an account is closed or you ask us to stop active use, we move items we are legally required to keep into a restricted archive (e.g., accounting records in France can be retained up to 10 years under the Commercial Code). These archives are not reused beyond compliance.

• Backups — System backups may contain temporary residual copies. They are not restored to production except in disaster recovery and expire through a short, automated rotation.

• Consent proof — We keep proof of your cookie choice for 13 months so we can demonstrate compliance, then ask again.

In short: we stop active use, keep what the law requires in restricted archives, let backups expire naturally, and document the operations.

Reference durations (France)

• Accounting & billing records — retained for up to 10 years (Commercial Code). Tax look-back windows can extend up to 6 years; we align archives with these horizons.

• Audience measurement (GA4) — retention configured to 14 months (provider setting).

• Cookie consent string — 13 months (AIM policy).

• Technical & security logs — kept as long as necessary to maintain integrity, detect/handle abuse, and meet compliance; when no longer needed in production, they move to a restricted technical archive rather than a “total purge.”

Flow-specific rules

Conversation & prompt history

• While the account is active — kept and accessible so you can resume work and so support can help you; duration is indeterminate while the account exists.

• On closure — moved out of active use; archived only where legally required.

• On request — email support@aim.example to request deletion from active use; legal archives/backups follow their statutory and technical cycles.

• Training opt-out — we stop using your future prompts/outputs for training from the moment you opt out. Past training cannot be “un-trained,” but no further reuse occurs after opt-out.

Google integrations (Gmail / Calendar)

• Ephemeral processing to fulfill your action (e.g., summarize unread mail, create an event).

• No extended storage beyond delivery unless you choose to save a result (e.g., a note/summary).

• Revocation — you can revoke access at any time in your Google account; we stop flows immediately and allow any short-lived technical caches to expire through normal rotation.

Trackers, consent & access

• Strictly necessary trackers persist only for session/security/load-balancing.

• Non-essential trackers (e.g., analytics) run only if you choose Accept & Access (or select the tracking-free subscription for access without non-essential tracking). You can withdraw consent at any time.

What this means for you

• After closure or a stop request, active processing ends; only legally required archives remain with restricted access.

• In France, expect 10-year retention for accounting records; 13 months for cookie consent proof; 14 months for GA4 data.

• Security and logs are kept as needed for protection and compliance, then restricted.

• We keep an internal record of deletions, archiving actions, and any disaster-recovery restorations.

Conclusion

In short, AIM stops active use when required, keeps only what law demands in a legal archive (restricted access), and lets backups expire through a short automated rotation—no full purge claim. In France, accounting records may be retained up to 10 years; GA4 data is set to 14 months, and cookie consent proof to 13 months. Conversation & prompt history remains while your account is active (with training opt-out honored going forward), and Google integrations are processed ephemerally unless you choose to save results. Strictly necessary trackers persist for core operation; access follows Accept & Access or the tracking-free subscription, and you can withdraw consent anytime—we keep an internal record of deletions and archiving actions.

Effective date: {YYYY-MM-DD} • Last updated: {YYYY-MM-DD}