Data Retention Policy
Edit on GitHubThis policy explains how long we keep your data and what happens to inactive accounts. See our Privacy Notice for what data we hold and why.
How long we keep your data
We keep your account and assurance cases for as long as you're actively using the platform. If you stop using your account, we'll keep your data for 2 years since your last login, or since your account was created if you have never logged in, before taking any action.
We check for inactive accounts daily. Integration (system) accounts are exempt from inactivity deletion.
What happens to inactive accounts
If you haven't logged in for 2 years, we'll:
- Send you a warning email 30 days before we plan to delete your account
- Send a final reminder 7 days before deletion
- Delete your account if you don't log back in
Simply logging in resets the clock - your account will remain active for another 2 years from that point.
Before we delete your account
Before deletion, you'll have the opportunity to:
- Export your data - download all your assurance cases
- Log back in - this cancels the deletion and keeps your account active
What gets deleted
When we delete an inactive account:
- Cases you own that have another Admin are kept under that Admin
- Cases with no other Admin are deleted
- Your name is removed from your comments on cases that are kept
- Your account details, sign-in identifiers and connected-account tokens are deleted
Collaborators keep access to cases that are kept under another Admin. If a case has no other Admin, collaborators lose access when it is deleted. We recommend transferring important shared work to another team member before your account becomes inactive.
If a deleted case was published on Discover, its public copy stays up, marked as archived and no longer updating. Nobody can remove it through the app once your account is gone; contact us if you need it taken down.
Questions
If you have questions about this policy or your data, contact us at cburr@turing.ac.uk.
Last updated: September 2026