Product-enforced periods
| Record | Retention |
|---|---|
| Temporary Zendesk profile workspace | Maximum 24 hours; earlier cleanup on cancellation, disconnect, tenant deletion, or the TTL worker. |
| OAuth authorization state | 10 minutes, then automatic cleanup. |
| OAuth credentials | Only while connected; deleted locally on disconnect even if remote revocation fails. |
| Administrator name and email | While connected; removed on disconnect or tenant deletion. |
| Minimized findings, decisions, policy, scan metadata, and aggregates | While the tenant uses RecordLint; removed by “Delete all data.” Raw exported profiles are not included. |
| Audit events | Up to 365 days, or earlier tenant deletion. |
| CSV exports | Not retained by RecordLint; streamed to the administrator. |
| Application and security logs | Up to 30 days. Raw profiles, contact values, and OAuth secrets are prohibited from logs. |
| Backups | Up to 30 days, followed by permanent deletion within 7 days. Backups are restored only for disaster recovery. |
| Support records | Up to 24 months after the request is closed, or earlier when no longer needed. |
| Billing and tax records | Five years from the end of the calendar year in which the applicable tax payment deadline expired, or longer where Polish law suspends or extends that period. These records are kept separately from Zendesk Customer Data. |
Production enforcement
Production infrastructure is not yet connected to public customer data. Provider configuration, restore procedures, and deletion tests must match the periods above before public production processing begins.
Tenant deletion
“Delete all RecordLint data” is designed to remove credentials, operator profile, temporary workspaces, findings, decisions, policy, aggregates, audit events, installation records, queued jobs, and report metadata. The action requires the exact confirmation phrase DELETE ALL RECORDLINT DATA and cannot be undone.