Status Retention and Deletion Policy

Data classes, documented defaults, exports, closure, backup expiry, holds, and verified deletion for Status.

Last revised: October 23, 2026

This Retention and Deletion Policy ("Policy") sets out the applicable lifecycle rules for Status Customer Data and associated administrative records. It supplements the DPA for processing on Customer's behalf and the Privacy Policy for Solarius's controller activities, subject to their respective scope and precedence. An instruction to delete a personal identity, remove membership, retire a resource, cancel a subscription, or close an organization shall apply only to its confirmed scope; those instructions are not interchangeable.

Product retention classesLink kopiëren

Set result retention at Settings → Organization using monitor-result retention. It does not erase incident or maintenance records or monitor configuration. Expired results are removed by bounded cleanup batches. The recycle bin restores configuration rather than all historical observations. Restored monitors return paused.

Administrative and legal recordsLink kopiëren

Account and business-contact records remain while needed for the relationship, account security, or a documented legal purpose. Routine support records are reviewed against the case purpose and the applicable support schedule; customer attachments must not be retained indefinitely merely because a ticket exists. Payment and tax records follow applicable accounting retention requirements, which can outlast service termination. Solarius explains the applicable period or legal criterion when responding to a request.

Security and audit records can be retained to investigate abuse, establish accountability, or defend legal claims for a documented, proportionate period. A retained actor address or organization slug can still be personal data. Deletion of a business object is not a justification for keeping every associated log forever. Where product audit records survive purge, they remain access-restricted, subject to review and lawful erasure exceptions rather than unrestricted indefinite use.

Export and ordinary end of serviceLink kopiëren

For an ordinary end of service, Solarius provides a 30-day opportunity after the effective end date to retrieve existing customer data through available exports or a verified support request, unless you instruct earlier deletion, your signed agreement sets another period, or a binding legal requirement prevents access. This is a transition window for retained data, not a promise to keep workloads running, execute new checks, preserve an address allocation, continue active protection, or retain observations beyond their already scheduled expiry.

An explicit organization-closure request follows its confirmed product lifecycle instead. In Status, the documented seven-day closure lifecycle can purge the tenant before the ordinary 30-day export window; confirming that closure is an instruction to use the shorter window. Export before confirming it. Resource-level deletion and raw-evidence expiry likewise take effect under their own settings rather than being delayed by the general transition window.

At the customer's choice, Solarius returns or deletes covered data. After the retrieval window, active-service copies scheduled for end-of-service deletion are removed within 30 days, except for a lawful hold, a customer-requested continuing resource, or an expressly agreed longer schedule. Managed backup remnants expire under the disclosed backup schedule, ordinarily within 90 days after active-service deletion. A longer fixed backup or retention-lock requirement must be disclosed and agreed before relying on it, or explained when later imposed by binding law. These contractual limits do not describe customer-operated or independently exported copies.

Before leaving Status, export the records and monitor packages you need and protect their embedded credentials. Arrange replacement checks and on-call routing, export incident reports, and review custom domains and public notices. Subscription cancellation is separate from organization deletion. The cloud deletion lifecycle makes the tenant read-only, drains agents, releases custom domains, and reserves the slug; it can be canceled during the seven-day window. Review backup and restore and the recycle bin before relying on recovery.

How to request deletion or returnLink kopiëren

An authorized owner can request an organization export or closure through help@solarius.me, identifying the organization, product, data scope, destination or deletion choice, and requested timing. Use the product's linked resource or data-deletion procedures for an individual object. Solarius verifies authority and confirms the scope, effective date, blockers, and consequences. An accepted request is not a completion confirmation.

For individual privacy rights, contact dpo@solarius.me. An employee's account deletion does not generally erase organization-owned evidence or commercial records to which a lawful retention duty applies. Solarius explains any restriction and separates the remaining lawful record from unnecessary identity details when feasible.

Holds, backups, and external copiesLink kopiëren

Any suspension of ordinary deletion for preservation purposes ("Hold") shall have an identified legal obligation or other valid lawful basis, a defined data and time scope, an accountable owner, and a review or expiry condition. The Party requesting a Hold shall establish authority for the request; the label "Hold" does not itself create an exemption from data-protection law. Customer-requested evidence or litigation holds remain subject to the customer's lawful basis; a hold is not a way to avoid privacy obligations indefinitely. Solarius restricts access and use to preservation and the authorized purpose and reviews whether the reason still applies. Releasing a hold makes data eligible for its ordinary lifecycle, not necessarily immediate physical erasure.

Residual backup copies shall be protected against ordinary operational access and use and shall expire in accordance with the documented backup cycle. Restoration shall not reinstate a superseded processing permission: outstanding deletion, restriction, and revocation instructions shall be reapplied before restored data returns to ordinary processing. Shared storage, deduplication, destination locks, and live references can mean removing a visible object is separate from reclaiming physical space. Solarius does not claim that revoking an encryption key proves every independently held plaintext or export was erased.

Customers control self-hosted storage, downloaded packages, external archives, recipients' copies, and providers they independently engage. Solarius cannot recall a public page from another party's archive or destroy a downloaded evidence package on a recipient's machine. Solarius identifies the affected boundary and cooperates within Solarius's actual control rather than reporting unsupported completion.

Completion and exceptionsLink kopiëren

Upon an authorized request, Solarius shall provide confirmation identifying the data classes addressed, completed return or deletion actions, outstanding backup expiry, and each retained category with its lawful justification and review or expiry criterion. Receipt or acceptance of an instruction shall not be represented as completion. The DPA's confidentiality, security, and purpose limitations continue for covered data retained after termination. Solarius does not withhold a legally required privacy response because of a billing dispute. Valid resource charges and agreed storage commitments remain governed by the billing policy; retaining a narrow legal record does not by itself justify charging for an entire continuing service.