Data Retention Policy

Typing and sensitive-data masking remain in your browser until you explicitly approve a preview. Only the approved preview and approved follow-up answers are submitted. Guest records are encrypted by NetRisk before storage with Upstash in Frankfurt.

Guest access and the active record expire one hour after the initial submission. The guest review includes a deletion control that removes its active record sooner. Expiry and deletion do not guarantee immediate physical erasure of encrypted provider storage copies. Limited hashed abuse-prevention records may outlive the guest review; they do not contain submitted review text.

AI assistance, account saving and document uploads have separate release controls. When they are disabled, guest text is not sent to an AI provider and no saved account copy is created. The other beta retention categories below do not extend active guest review retention.

Account data may be retained while the account is active. If an account is deleted, some information may be retained for a limited period for security, abuse prevention, legal, or operational reasons.

Submitted vendor names, domains, URLs, notes, scan results, and related analysis may be retained during the beta to provide the service, improve results, support feedback, and prevent abuse.

If evidence upload is enabled, uploaded files may be retained while needed for the user workflow, beta testing, product improvement, or security review.

Users should not upload information they are not authorized to process.

AI prompts, questions, generated answers, summaries, and related context may be retained to provide the service, improve quality, troubleshoot issues, and detect abuse.

Security logs, usage logs, error logs, and audit logs may be retained for security, troubleshooting, fraud prevention, and abuse detection.

Feedback may be retained to improve NetRisk and guide product development.

Users may request deletion of their account or submitted information by contacting privacy@netrisk.io.

Some data may be retained where required for security, abuse prevention, legal, backup, or operational reasons.

Deleted information may remain in backups for a limited period before being overwritten or removed according to backup processes.

Retention periods may change as NetRisk evolves from beta to a more mature service.