Data retention

Our Privacy Policy explains that we retain data for shorter or longer periods depending on what it is and why we collect it. This page sets out the retention periods and deletion timelines for the main categories of data in more detail.

Account data

We keep your Ordnary Account data, such as your name, email address, and account settings, for as long as your account is active. If you delete your account, we remove this data within 30 days, except where we're required to keep limited records for longer, as described below.

Content and customer data

Content you create, upload, or store in our services, and customer data processed through Ordnary Web Services, is kept for as long as you choose to keep it. When you delete specific content or resources, we remove it from active systems within 30 days, and from backups on the backup cycle described below.

Backups

Backups of active systems are kept on a rolling basis and are typically overwritten or expired within 90 days. Data you've deleted from active systems may still exist in a backup for up to that period, and is removed as those backups age out; we don't restore deleted data from a backup except to recover from a service-wide incident.

Server and access logs

Server logs, such as request logs and access logs, are typically kept for 13 months for security and abuse-prevention purposes, then deleted or anonymized. Some log categories used specifically for security monitoring may be kept for up to 24 months.

Billing and financial records

We keep invoices, payment records, and related financial data for 7 years after the transaction, to meet Dutch and EU tax and accounting record-keeping requirements. This applies even after you delete your account.

Support and communications

Records of support conversations and other communications with us are typically kept for 3 years after the last interaction, so we can maintain service quality and handle follow-up questions.

Legal holds

Where we're required to preserve data for litigation, a regulatory inquiry, or another legal obligation, we retain the relevant data for as long as that requirement applies, even if it would otherwise have been deleted sooner.

Data linked to your account deletion

Deleting your Ordnary Account removes personal data associated with it from our active systems within 30 days, except for the categories above that we're required or permitted to keep longer, such as billing records and legal holds. Data in shared or collaborative contexts, such as content you shared with other users, may remain visible to those users after your account is deleted.

Your rights

If EU or UK data protection law applies to you, you have rights to access, correct, delete, and restrict the processing of your personal data, as described in our Privacy Policy. Some retention periods on this page exist specifically to meet legal obligations, and may limit how quickly certain data can be deleted on request.

Contact

Questions about data retention? Contact privacy@ordnary.com.

For urgent requests, call +31 85 401 3197.