We retain data only as long as necessary to provide the service, meet legal obligations, and protect the platform. Different categories of data have different retention timelines based on their purpose and applicable requirements.
Account And Profile Data
We retain your account information, including name, email address, authentication details, and organization data, for as long as your account remains active. After account closure, we retain this data for up to 90 days to facilitate account recovery and resolve any outstanding issues, after which it is permanently deleted unless a longer retention period is required by law.
Billing And Transaction Records
Billing records, invoices, receipts, payment history, and subscription details are retained for a minimum of seven years after the transaction date to comply with financial reporting, tax, and audit obligations. This applies even after account closure or cancellation.
Payment card details are not stored on our systems. Card data is handled exclusively by our payment processor, Stripe, and is subject to Stripe's own data retention and PCI-DSS compliance practices.
Hosted Environments And Customer Content
Your hosted containers, deployed workloads, stored files, databases, and related configurations are retained for as long as your subscription is active. After cancellation or account closure, we retain hosted environment data for 30 days to allow for re-activation or data export.
After the 30-day post-cancellation retention period, hosted environments and their contents may be permanently deleted. We are not responsible for data loss after this period. If you need to preserve your data, you must export it before the retention period expires.
Logs, Usage Data, And Analytics
Operational logs, including API request logs, container activity logs, usage metering data, and error logs, are retained for up to 12 months for troubleshooting, security investigations, billing verification, and platform improvement purposes.
Aggregated and anonymized usage analytics that cannot be linked back to individual users may be retained indefinitely for statistical analysis and platform optimization.
Support And Communications
Support tickets, email correspondence, and other communications with our team are retained for up to three years after resolution. This allows us to reference prior interactions for context and to resolve recurring issues effectively.
Security And Abuse Records
Records related to security incidents, policy violations, abuse reports, and enforcement actions are retained for a minimum of five years, or longer if required for ongoing investigations or legal proceedings.
Data Deletion Requests
You may request deletion of your personal data by contacting support@virtustructure.com. We will process deletion requests within 30 days, subject to legal retention obligations, outstanding billing, and legitimate business needs.
Certain data may not be eligible for immediate deletion, including billing records required for financial compliance, data needed for active dispute resolution, and data we are legally required to retain. We will inform you if any part of your deletion request cannot be fulfilled and explain the reason.
Data Portability
You can export your hosted environment data, configurations, and account information at any time while your subscription is active. We provide tools within the platform to facilitate data export. After account closure, export capabilities are available during the 30-day retention period.