Data retention · last updated June 13, 2026
Data Retention Policy
This page explains exactly what Jaagaa keeps, for how long, and how to make us delete it. Customer application data is excluded by design: it lives in your own cloud account, not on Jaagaa servers.
1. Summary table
| Data class | Retention | Trigger to delete |
|---|---|---|
| Account + identity (email, OAuth subject) | Lifetime of account | Account deletion request |
| Encrypted Cloudflare API tokens | Lifetime of app | Removed from console OR app offboarded |
| Provisioning logs (per app) | 90 days | Automatic rolling delete |
| Error traces & deploy diagnostics | 30 days | Automatic rolling delete |
| Billing records (invoices, plan history) | 7 years | Required by tax law; non-deletable |
| Transactional email logs (Resend) | 30 days | Automatic, via Resend |
| Trial-pool CF resources (Worker, D1, R2) | Trial period only | Auto-purge at expiry OR explicit user offboard |
| Marketing analytics (pageviews) | 12 months, anonymized | Automatic rolling delete |
| Customer application data (files, messages, customers, etc.) | N/A — never stored by Jaagaa | Lives in your cloud account; you control it |
2. Customer application data is yours
The data your tenants generate — uploaded files, customer records, message threads, app settings — lives in the Cloudflare D1 database and R2 bucket on the account you own (BYO) or on the trial-pool account we provision for your trial. Jaagaa does not maintain a copy, a backup, or analytics on that data. When you offboard an app:
- BYO apps: the D1 database and R2 bucket remain in your Cloudflare account. You can keep them, export them, or delete them. The operator console offers a one-click "wipe CF D1 + R2 + Worker" action that performs the deletion against your account.
- Trial apps: at trial expiry or explicit offboard, we destroy the Worker, D1 database, and R2 bucket on the trial-pool account. Destruction is irreversible.
3. How to request deletion
- Offboard the app from the operator console (this removes the app row, encrypted token, and provisioning logs).
- If you want your account itself deleted, email [email protected] from the account's registered address. We will confirm and delete within 30 days.
- Billing records are retained as required by tax law. You may request anonymization at the end of the legally required period.
4. Backups
Our control-plane Postgres has nightly snapshots retained for 14 days; deletion requests propagate through those backups within that window. We do not backup customer application data because we don't hold it; your Cloudflare account governs the backups for the data that lives there.
5. Legal holds
If we receive a valid legal request that requires us to preserve data, we will retain the minimum set of records required for the duration of the hold. We will notify you when permitted by law.
6. Contact
Questions or deletion requests: [email protected].