The general rule
Data stays while its purpose is alive; after that it is deleted or de-identified. The periods below are ceilings, not minimums: if the purpose ends sooner, the data goes sooner.
Three exceptions do not shorten: a legal obligation to keep financial records, the audit log which is append-only, and a file that is open in a legal dispute.
Period per category
- Profile, company, industry and markets: for the duration of membership. They are not deleted automatically when membership ends — they leave the directory and matchmaking, and remain until you ask for erasure.
- Email and phone: as the profile; raw contact details from an event registration are erased as soon as they are linked or expire.
- One-time sign-in code: at most 24 hours.
- Entry QR token: about 90 seconds; a used token is never accepted again.
- Lounge and event attendance records: during membership, for quotas and reporting.
- Intake voice message: deleted immediately after a successful transcription, at most seven days.
- CV and LinkedIn PDF: until the membership is deleted, at most twelve months.
- Unaccepted AI suggestions: until consent is withdrawn or they are deleted by hand.
- Chat messages and their translation: during membership; a deleted message is removed from both sides.
- In-app notifications: 90 days after they are read, or 365 days if never read.
- Consent records and the text version accepted: up to ten years, because they evidence that processing was lawful.
- Payment orders and financial records: ten years, required by Turkish commercial and tax law.
- Audit record of reads of personal data: append-only and not deleted, because it is the evidence of who saw what. The record of a self-requested erasure holds no name or email, only a hash of the email.
- Session cookie until sign-out; language and theme cookies for a year or until you clear them.
When a membership ends
The profile is taken out of the directory and out of matchmaking. After the period above, personal data is deleted or de-identified and only anonymous statistical counters remain. Introductions that already happened remain as an anonymous record such as one introduction in a given month.
If you have a financial or membership record, the account is not erased but closed: your row stays with no name, no contact, no photo and no sign-in account, so the financial documents have something to attach to. If you ever return with the same email, that history comes back to your dashboard.
What does not go sooner
The non-circumvention record and the introduction history are the basis of a share claim within the contract period and do not vanish when an account is deleted; they are de-identified instead. That tension with the right to erasure is on our legal review register and the final answer will be written here.