1. The principle
We keep data only as long as it is needed to run your account, to publish your posts and to keep the service secure. Short-lived technical data expires by itself; content you create stays until you delete it; and when you disconnect a channel or delete your data, what we copied from that channel goes with it. This page lists how long each kind of data is kept. The Privacy Policy explains why we hold it.
2. The schedule
| Data | How long it is kept | How it is removed |
|---|---|---|
| Sign-in sessions | Until 8 hours without activity (12 hours at most); 30 days if you chose to stay signed in | Expires by itself, or when you sign out |
| Security counters (sign-in attempts, usage limits) | One time window, from minutes to a day | Expires by itself |
| Email verification and password reset links | Until used or expired | Expires by itself |
| Client review links | 14 days, or until revoked | Expires by itself, or you revoke it |
| Payment event identifiers | 30 days (to avoid processing an event twice) | Expires by itself |
| Media for a post | Removed as soon as the post is published or cancelled; never longer than 32 days | Deleted by Postalu, then by a storage rule |
| Copy of your channels' posts (for Sent and Insights) | Refreshed while the channel is connected; a post not refreshed for 180 days is dropped | Deleted when you disconnect the channel, or on a verified deletion request from the platform |
| Daily totals per channel | While the channel is connected | Deleted when you disconnect the channel or on a deletion request |
| Posts, drafts, schedules, queues, brand voice | Until you delete them or your workspace is deleted | Deleted by you or on request |
| Connected account tokens | While the channel is connected | Deleted when you disconnect |
| Account details (name, email, role) | While your account exists | Deleted on request |
| Audit record of account and security actions | Kept for the life of the workspace so that changes can be traced | Deleted with the workspace |
| Feedback you send us | Until we delete it | Deleted by us, or on request |
| Database backups | 90 days | Deleted by a storage rule |
| Application logs | 30 days in the log service; where archiving is switched on, copies are kept for up to a further 365 days | Deleted by a storage rule |
3. When you leave
If you close your account or ask us to erase your data, we delete your workspace content. Copies held in backups and archived logs are not edited; they expire on the schedule above. Records we must keep by law, for example invoices held by our payment provider, are kept for as long as the law requires.
- Disconnecting a channel removes its tokens and the copy of its posts straight away.
- Posts you made in Postalu and their records stay until you delete them.
4. Changes to this schedule
If we change a period on this page, we update the version and date at the top and describe the change on the legal documents page.
Last updated October 31, 2026 · Version 1.0
