Anana policy evolution

retention

Latest stance: deletion or time bound

“Operator user account and authentication data For the life of the customer contract; deleted within 1 year of contract termination. Voice recordings Retained per the venue's configuration and not used for model training; Anana-held copies are deleted on the venue's instruction or within 1 year of contract termination. Voice transcripts Retained per the venue's configuration as part of the conversation record; deleted with the associated tenant data on the venue's instruction or within 1 year of contract termination. Inbound messages (chat, SMS, email) Retained per the venue's configuration as part of the conversation record; deleted on the venue's instruction or within 1 year of contract termination. Booking/guest profile data synced from PMS/CRM Controlled by the venue; Anana deletes on the venue's instruction or contract end. Embeddings in pgvector Tied to the source artifact; deleted when the source is deleted. Audit logs (artifact create / version / send) 2 years. Server logs / WAF logs Application production logs 30 days; AWS CloudFront/WAF edge logs per their configuration. Database backups Daily backups retained 7 days on a rolling cycle. Business contacts (CRM) Until objection or 2 years of inactivity. Accounting and tax records As required by applicable law (typically 7–10 years).”