Data Retention Policy
Effective July 26, 2026
| Data | Retention |
|---|---|
| Active accounts, deals, documents, results | Until you delete them (or disclosed account/contract termination) |
| Abandoned/incomplete uploads, temporary OCR/intermediate artifacts | ~24 hours |
| Extraction caches and other temporary processing artifacts | Expire within 24 hours |
| Superseded extracted facts | Kept with the deal's provenance record until you delete the deal (or the document they came from) |
| Operational logs | Follow our hosting providers' default retention windows |
| Raw document content / extracted text / full prompts + responses in logs | Never retained |
| Access removal after a confirmed deletion | Immediate |
| Live-system object purge after deletion | Target ≤ 24 hours |
| Deletion receipts | Permanent content-free audit record (no document or deal content) |
| Security metadata (no substantive content) | ~12 months |
| Encrypted database backups | ~35 days, then expired by lifecycle |
Deletion in backups
Deleted data may persist in encrypted backups until they age out. As part of our restore runbook, we check the deletion ledger and re-apply deletions completed after the backup timestamp before a restored system returns to service, so deleted data does not reappear.
Account deletion
When you request account/workspace deletion, we deactivate access immediately and retain data only for a short compliance window before hard deletion, and we can produce a content-free deletion receipt. To request deletion or a copy of your data, contact support@altyst.ai. See also the Privacy Policy.
*Altyst — commercial real-estate underwriting software. Effective July 26, 2026. Version 1.3. Questions about this document: support@altyst.ai.*