1. Temporary deletion by default
Attendee photos and generated results receive a scheduled expiration. Organization administrators may choose only platform-approved temporary periods and cannot disable ordinary-session deletion indefinitely.
2. Attendee photographs
Photos are stored privately for the session and deleted at completion or temporary expiry according to the configured policy. A retained derivative does not retain the attendee photo.
3. Generated videos
Undisclosed results remain limited to review and Presentation Mode. They are temporary unless a separate retained-asset workflow creates a disclosed derivative.
4. Approved reusable templates
Approved templates are organization-managed reusable assets and are preserved when an individual session is completed or deleted.
5. Provider processing and deletion
Provider assets are requested for cleanup at completion where supported. Exact provider deletion timing must be verified and is not guaranteed by this draft.
6. Failed-job cleanup
Failed and cancelled jobs retain safe operational state long enough to prevent duplicate submissions and support cleanup. Partial outputs are not approved for presentation.
7. Session deletion and token revocation
Deleting a session removes its attendee photo and result from active application storage, cancels active work, and revokes presentation tokens. Completing a presentation revokes its token.
8. Approved retained assets
A retained derivative requires separate review and persistent disclosure, documented uses and channels, an owner, and a review date. Revocation stops permitted future use and initiates deletion where applicable.
9. Audit and operational metadata
Limited non-media metadata may remain for security, reliability, authorization records, and investigations. Audit metadata excludes media bytes, credentials, and invitation tokens.
10. Backup limitations
[LEGAL REVIEW REQUIRED] Backup scope and residual deletion windows must be verified before production commitments are made.
11. Deletion requests
Requests should be directed to privacy@signalsession.example and coordinated with the organization that conducted the session.
12. Legal hold
[LEGAL REVIEW REQUIRED] Necessary records may be preserved when legally required, subject to a documented legal-hold process.