What we keep, where, and for how long.
The short version of our Privacy Policy. If something isn't listed here, we don't keep it.
| Data | What we keep and where | How long |
|---|---|---|
| Forwarded emails | Forwarded emails pass through our email relay, Postmark, which keeps a copy for 45 days and then deletes it automatically. Forenota itself never stores the full email: we keep only the extracted item (sender, subject, date and a short summary), and attachments only if you choose to save them. | Postmark: 45 days. Open items stay until they are done. 90 days after an item is marked done, it is deleted with the sender, subject and summary. |
| Email attachments | Held in private storage so you can tap "Save to vault" in chat. Saved ones go to your document vault. | 60 minutes unless you save them, then deleted. |
| Catch-up uploads | Only the extracted items are kept. Each uploaded file is deleted as soon as it has been processed. | If a file fails, it's kept for at most 24 hours for a retry, then deleted regardless, and the owner is told which part didn't import. |
| Chat messages | Messages between your team and Forenota in Telegram and WhatsApp, in our database. | While your plan is active. After you cancel or delete the business: 90 days, then permanently deleted. |
| Voice notes | Transcribed to text. Only the transcript is kept, with your chat messages. The recording is deleted as soon as it has been transcribed. | Recording: deleted once transcribed. If transcription fails, kept in private storage for at most 24 hours for a retry, then deleted. Transcript: as chat messages. |
| Documents and slips | Files you or your team save to the vault, and expense slips, in private storage. | Until you delete them, or 90 days after you cancel or delete the business. |
| Team details | Names, roles, areas, chat links, schedules, leave and certifications. | While the person is on your team. Removed members can be restored for 30 days, then their details are erased. |
| Billing | Plan, invoices and payment status. Card details stay with Paystack; we never see them. | 5 years after each payment, as tax law requires. |
| AI processing | Google Gemini and OpenAI, through the Lovable AI gateway, read only what each request needs. Your data is not used to train AI models, by us or by them. | Not kept by Forenota beyond the result. Providers keep requests only as long as their abuse checks require. |
| System logs | Errors and usage records, without email or message content. | Up to 12 months. |
| Backups | Copies of the database made by our hosting provider, so nothing is lost in an outage. | Overwritten on a rolling cycle of up to 30 days, so deleted data leaves backups within that time. |
| Export and deletion | Owners can download everything as one ZIP file from Settings, Data & privacy, and delete the business there. | After a cancelled plan ends, we keep everything for 90 days and email the owner a download link at cancellation, day 60 and day 83, each with the deletion date. Paying again before then restores everything. Deleting the business can be undone for 90 days. After that it's permanent (invoices kept 5 years). |
Questions or a data request? support@forenota.com · Security · Privacy Policy