Skip to main content
JOIN THE WAITLIST · FREE SIGNUP + FIRST REPORT ANALYSIS AT LAUNCH
Credit Hack AI

Data retention

Credit Hack AI is designed around a "keep the minimum, delete as soon as we can" philosophy. This page describes how long we keep each category of data and how to get it exported or deleted.

Active cases

While a dispute case is active, we keep the parsed report data, generated letters, cycle state, and tracking entries online so that you can continue your cycle. Once a case is marked completed, we keep it accessible for 90 days by default (your operator may configure a different value), after which it enters the archival phase described below.

Post-completion archival

After the active window, a case is archived to one or more cloud backup destinations configured by your operator (for example, Google Drive, OneDrive, or Backblaze B2). The local copy on the application's disk is deleted. You can request a restore at any time from your account page; restoring may take a few minutes.

Per-file lifecycle

  • Uploaded credit report PDFs: deleted from the application disk 24 hours after upload. We convert them to a structured markdown/JSON representation first, so we never need the PDF again after processing.
  • Parsed report markdown: retained for the active retention window, then archived alongside the case.
  • Generated letters (markdown + rendered PDF): retained for the active retention window, then archived alongside the case.

Audit logs

Audit log entries (sign-in events, data exports, privileged actions) are kept for 2 years and then purged. They contain no report contents, no SSN, and no DOB — only the actor, the action, the target type and id, and a small metadata blob.

Tracking entries

USPS and other carrier tracking records are kept for 1 year after the last API check, then purged. That's long enough to keep the full delivery history for a cycle and to handle late-dispute follow-ups.

Superseded cycles

When a new cycle supersedes an older one, the older cycle's data is kept around for 90 days in case you need to reference it, then removed by the monthly cleanup job.

Database cleanup job

A scheduled job runs once a month to enforce every retention policy above. The job is audited; operators can see its last run in the worker dashboard.

Requesting export

You can download a portable copy of the metadata we hold about your account (profile, cases, cycles, letter metadata, report upload metadata, tracking entries) from /account/export. Requests are processed synchronously; the archive downloads as a ZIP.

Requesting deletion

You can delete your account and all associated data from the account settings page. Deletion is irreversible and cascades across cases, cycles, letters, tracking entries, and audit logs for your user. Cloud-backup copies are removed on the next backup cycle.

Questions?

For anything not covered here, see our Privacy Policy, our Terms of Service, or reach out to support.