| Data Type | Retention Period | Deletion Method |
|---|---|---|
| Passive engagement scan data & findings | 90 days from delivery | Secure deletion on schedule |
| Active engagement scan data & findings | 365 days from delivery | Secure deletion on schedule |
| Guardian subscription data | Subscription + 90 days | Secure deletion post-subscription |
| Authorization documents | 3 years from signing | Archived, then deleted |
| Invoice and payment records | Per the payment provider named on your invoice | Not held by Pilum.io |
| Source code (repository you provide) | Session only — deleted after PDF generated | Secure deletion immediately post-scan |
| Anonymized aggregate findings data | Indefinite | Never contains identifying information |
| Client email addresses | Duration of relationship + 90 days | Deleted on request |
Email security@pilum.io with subject “Data Deletion Request — [your domain]”. Processed within 72 hours. We will confirm deletion in writing.
Files are securely deleted from the operator’s machine. Database rows are anonymized (client identifiers replaced with null) before aggregate data is retained. Encrypted backups are held on the operator’s own machine and are rotated on a rolling basis, with older backups removed as newer ones are taken.
Vulnerability type frequencies, severity distributions, false positive rates, tool fingerprint accuracy scores. This data has no client identifiers attached and cannot be used to reconstruct any client’s findings.