retention
Latest stance: deletion or time bound
“Upon expiry, Processor will (at Controller’s choice) return or delete/anonymize Personal Data unless legal retention is required. If Controller does not instruct within thirty (30) days after termination, Processor will apply the default process under the Terms: export availability + deletion within standard cycles and in any event within ninety (90) days after termination.”Open citation