Data Retention & Disposal Policy

Sitelace — operated by Domfly LLC · Last reviewed June 22, 2026 · Next review June 2027

This policy describes how Sitelace retains and disposes of the data we hold. It complements our Privacy Policy.

Scope

This policy covers all data Sitelace processes about its users, including account details, connected WordPress site information, chat history, and site edit records.

Retention periods

Data	Retention
Account profile (email, name)	While the account is active; erased on account deletion.
Connected site data (URLs, pairing tokens, site metadata)	While the account is active and the site remains connected; erased on account deletion or site disconnection.
Chat history and AI edit records	While the account is active; erased on account deletion.
Staged edits (pending/applied)	Erased on confirmation, cancellation, or account deletion.
Operational logs / diagnostics	Short-lived; retained only as needed to operate and secure the service.

Deletion & disposal

On request — users can request permanent account deletion at any time by emailing us.
From active systems — deletion removes the data from our production database promptly.
From backups — residual copies in encrypted backups are purged within 30 days.

Security of stored data

Data is encrypted in transit (TLS) and at rest. Access to systems that store this data requires multi-factor authentication.

Service providers

Data is stored and processed by vendors under contract: Cloudflare (hosting), Neon (database), a third-party AI provider (AI text). We do not sell or rent personal information.

Review

This policy is reviewed at least annually. The review date is shown above.

Contact

support@sitelace.com