Appendix D: Data Retention and Privacy
How long data is kept, export options, and deletion policies.
- Activities — Kept indefinitely (soft-deleted on request, recoverable for 30 days)
- Exports — Auto-deleted after 24 hours
- Recently deleted items — Recoverable for 30 days, then permanently deleted
- Audit logs — Kept indefinitely for security compliance
- Integration tokens — Encrypted at rest in the database
- API keys — Only SHA-256 hash stored; full key never saved
You can export all your data at any time from Settings > Privacy. You can delete your account from the same page — there is a 7-day waiting period before permanent deletion.
This manual covers ENDURE as of February 2026. Features are actively being developed. For the latest updates, check the project status board at /project-status.