Data Retention & Deletion Policy
Target retention periods and deletion rules for PhiShark records.
- Version
- 1.0-draft
- Effective date
- Upon publication following legal approval
- Last updated
- 25 July 2026
- Change summary
- Initial consolidated draft covering the website, platform, API and client integrations.
1. Target retention schedule
| Record category | Target period | Trigger / notes |
|---|---|---|
| Scan results | 24 months | From scan completion |
| Raw HTML, screenshots, favicons, PDF/QR and similar artefacts | 90 days | From collection |
| Mail-analysis summaries | 30 days | From analysis |
| Encrypted full email detail | Off by default | Only when expressly configured and authorized |
| Raw prompt-injection content | No persistent retention | Transient processing only |
| Security and audit logs | 12 months | From event |
| Support and contact requests | 24 months | From closure or last contact |
| Deleted data in backups | Up to 30 days | Subject to secure backup rotation |
| Billing, tax and dispute records | Statutory period | Applicable legal or claims requirement |
2. Account and content deletion
For an eligible individual-account deletion, active sessions and API credentials should be revoked promptly and profile and personal scans queued for deletion. A request may be limited where retention is required for law, fraud prevention, security, payment, legal claims or another lawful purpose.
3. Enterprise accounts
Enterprise content is controlled by the customer under its agreement. Removing an employee account does not automatically delete organizational records. Authorized administrators or the customer controller must submit or approve organization-level export and deletion requests.
4. Technical verification status
Firestore TTL, object-storage lifecycle, scheduled deletion, backup expiry and legal-hold behavior must be validated before this schedule is published as technically enforced. Until then, [email protected] coordinates verified requests and documented exceptions.
This draft states the approved target schedule, not a certification that every production store already enforces it.
Company information
PHISHARK TEKNOLOJİ ANONİM ŞİRKETİ
Cevizli Mah. Zuhal Cad. Ritim İstanbul Sitesi A5 Blok No:46E İç Kapı No:179 Maltepe/İstanbul
Tax office / tax number: Kartal V.D. – 729 137 4297
MERSİS: 0729137429700001
Telephone information will be added as soon as possible.
Contact: [email protected] · [email protected] · [email protected]
Previous versions
No previous public version is archived for this draft.