Data retention
How long we keep things, and how they are deleted
We keep personal information only as long as we need it. Jobs run every night and delete or anonymize what has passed its period. This page is part of our privacy notice.
How long we keep each kind of information
| Information | How long, and what happens then |
|---|---|
| Visits, page views and taps (analytics), session records | 13 monthsDeleted every night |
| Cards shared, alert history on phones, lead read marks | 13 monthsDeleted every night |
| RSVPs and offer claims | 24 months after the event or the claimDeleted every night |
| The name and email of whoever sent in an event | 24 months after the eventRemoved every night; the event listing stays |
| Messages to a business, questions to Moe, "bring Moe to my town" requests | 24 monthsDeleted every night (kept with a signed agreement that came from them) |
| Sign-in codes | 10 minutes to use; deleted a day after they expireDeleted every night |
| One-time links from the app to the website | 5 minutes to use; deleted a day laterDeleted every night |
| Our copies of the emails we send you | The text 13 months, the record 24 monthsRemoved every night |
| Emails about agreements, invoices and receipts | 7 yearsContract and tax law |
| Signed agreements, invoices and payment records | At least 7 yearsContract and tax law; a deletion request does not remove these |
| Referral payout records | 7 yearsTax law; your name is removed if you ask us to erase your data |
| A business or organization account and its listing | While it is activeTaken down when you close the account; business records above stay for their own periods |
| Phones that get alerts (push tokens) | Until you sign out or remove the phone; unused phones 13 months (6 months for neighbors' alerts)Deleted |
| Reports about a listing | 13 monthsDeleted every night |
| Support requests and their messages (name, email, what you wrote, our replies) | 24 months after the last activity on the requestDeleted every night; a person can have them erased with a privacy request |
| Help-center feedback (Yes / No) tied to a signed-in email | 24 monthsDeleted every night; a person can have it erased with a privacy request |
| Privacy requests (to show we answered), with the IP address they came from | 24 months after they closeDeleted every night |
| IP address and browser details recorded when you sign an agreement or consent | With the signed agreement: at least 7 yearsContract law (proof of who signed) |
| Contact and personal details of an archived business listing | 24 months after it is archivedRemoved every night; the company name and agreement records stay |
| Error records from the site and app | 13 monthsDeleted every night |
| Database backups (Supabase) | 7 daily backupsOlder backups are deleted; erased data leaves as they roll off |
| Off-site copy of uploaded files (RigFresh server) | 30 nightly encrypted copiesOlder copies are deleted; erased files leave as they roll off |
| Moe's admin and security log | 7 yearsPersonal addresses are removed from it when you ask us to erase your data |
| "Do not email" list | For as long as we send emailOnly your address, so no email is sent to you by mistake |
When you ask us to delete your data
Ask at sentbymoe.com/privacy-request, or from the app (Account settings, then Privacy & security, then Delete my account). We confirm it is you with a code sent to your email, then we:
- delete your visits, RSVPs, offer claims, messages, support requests, town requests, sign-in codes and phones;
- remove your name and address from our email copies, event submissions, reports and our admin log;
- take your business or organization listing down, remove your contact details, photos and files from it, and keep only the company name and agreement links;
- keep only what the law makes us keep (signed agreements, invoices, payment records) and your address on our "do not email" list.
We finish this as the law requires.
Companies that hold data for us
- Supabase (our database and file storage, United States): deleted with the rules above. Supabase keeps 7 daily backups of the database; erased data leaves them as the backups roll off.
- RigFresh (the server that hosts the moe@sentbymoe.com mailbox and keeps the nightly encrypted off-site copy of uploaded files, 30 copies, then deleted).
- OpenRouter and TypeSafe (automated screening of submitted content): receive the submitted text only, never your email or phone.
- OpenRouter's image model (only if you choose "Make it a professional headshot"): your photo is sent to OpenRouter's image model to create the headshot and is not kept by them beyond processing. A new picture waits in private storage until you use it or delete it. It is also deleted when you make another one, when the listing is erased, and the next time the headshot box is opened more than a day later. We keep a log of each try (when, cost, which model) but not the pictures.
- Spaceship (our domain name and DNS): holds domain records, not visitor data.
- YouTube: loads only when you tap a video, under Google's own policy.
- Stripe (payments): keeps payment records under its own legal duties. We never see or store card numbers.
- Resend (sends our email): keeps delivery logs for a short time under its own policy.
- Expo, Apple and Google (app alerts): hold a phone's push token until the app is removed or the token is replaced.
- Vercel (runs the website): keeps short-lived request logs for fixing errors.
Questions
Write to moe@sentbymoe.com. See also Privacy & security.
