What we keep, why, and for how long.

iSyph is designed around a simple idea: the less data that lingers, the safer everyone is. This policy explains how we minimise and retain personal data.

1. Minimisation by design

We collect and process only the data necessary to operate your communication space and our relationship with you. Files shared within a space are designed to clear themselves once received or after a defined period.

2. Categories & retention periods

• Account & access data (who is in which space, roles) — retained for the duration of your engagement, then deleted within 15 days of termination.
• Conversation content — retention is configured by your company; you set what persists and for how long. Default: 15 days.
• Shared files — cleared once received or within 24 hrs., per your configuration.
• Website enquiry data (quote requests) — retained for 24-48 hrs. to respond to and manage your enquiry.
• Operational logs — retained for 30 days for security and reliability, then rotated out.

3. Deletion & return

On termination of an engagement, iSyph will, at your election, return or delete the personal data we process on your behalf, except where retention is required by law. Your environment is then decommissioned.

4. Your control

As the Data Fiduciary, your company sets retention parameters for conversation content within the bounds the platform supports. iSyph does not extend retention beyond your configuration.

Specific periods marked above must be confirmed by iSyph and reviewed by legal counsel before publication.