Data Retention Policy
Last updated: July 8, 2026 · Teresa QC LLC. Read together with our Privacy Policy.
Teresa QC keeps very little. Your uploads are processed in memory and are not saved to a Teresa QC database; your finished workpapers download to your own device. What remains is operational: session-log metadata and standard hosting logs. This page states how long each class of data is kept.
Retention Schedule
| Data class | Where it lives | Default retention | Notes |
|---|---|---|---|
| Engagement outputs (.docx, .xlsx) | Your device (browser download) | We retain nothing. | You control your copies; there is no server-side copy in the web flow. |
| Uploaded artifacts (COA / trial balance / general ledger / vouching workbook, pasted text) | In memory during the request only; sent to our AI subprocessor | Not retained by Teresa QC. | Held by Anthropic up to 30 days under its standard terms; content flagged for trust-and-safety review may be retained up to two years. No zero-retention agreement is in place. |
| Session logs (run metadata: counts, totals, gate results, override rationale) | Google Cloud Logging | 90 days [FERNANDO-CONFIRM] | Enforced by an explicit log-bucket retention rule. |
| Hosting request logs | Google Cloud Logging | 30 days [FERNANDO-CONFIRM] | Standard Cloud Run request logs; no request bodies. |
| Security-event logs (attack/extraction attempts incl. signed-in email; client error reports) | Google Cloud Logging | 180 days [FERNANDO-CONFIRM] | Kept longer to support abuse investigation. |
| Eligibility / profile records Planned | To be determined when profiles ship | While the account is active, then deleted 30 days after closure [FERNANDO-CONFIRM] | Card numbers are never stored; only your attestation. |
| Email correspondence | Google Workspace | 24 months [FERNANDO-CONFIRM] | Standard mailbox retention. |
| Browser-local session state Planned | Your browser (localStorage/IndexedDB), on your device | User-controlled. | We never receive it; clear it from your browser at any time. |
Deletion Requests
On a verified request to admin@teresaqc.com [FERNANDO-CONFIRM: contact address], we will purge the matching session-log and error-log entries by engagement ID within 30 days [FERNANDO-CONFIRM], subject to the fixed retention windows above.