Retention follows purpose
Account and preference data follows the account lifetime and deletion rules. Meeting content follows the meeting or account lifecycle, subject to shared-record obligations. Availability is retained only as needed for scheduling and calendar refresh. Provider credentials remain until disconnection, rotation, expiry, or account deletion.
Security and operational evidence
Limited audit, delivery, fraud-prevention, financial, and access-decision evidence may be retained for documented periods. Deleted accounts are separated from the active directory, show a purge timeline where applicable, and expose only the minimum evidence necessary to authorized operators.