Data retention policy

1. Telemetry

Device data (readings, locations, twin states, alerts) is kept for up to three years (1,095 days) from the moment it is received, in every plan. Data older than that is deleted automatically every night. Three years is also the maximum: we do not keep telemetry longer even on request, unless an Enterprise agreement says otherwise.

You can export your data at any time in CSV or ZIP from the console, or through the API, and keep it as long as you want on your side.

2. Organisations without an active subscription

If your organisation has no active subscription (trial ended without payment, cancellation, or a payment not collected within 14 days), ingestion stops and telemetry is kept for 90 days from the last day of service so that you can export it or resume the subscription. After 90 days it is deleted.

3. Account data

• User and organisation data: while the account exists and 90 days after deletion.
• Audit and security logs: 12 months.
• Invoices and billing records: 6 years, as required by UK tax law.

4. Deleting an organisation

Owners can ask for deletion of their organisation and all its data by writing to hello@nordicbyte.co.uk. We confirm within one month and delete everything except what we must keep by law. Backups containing the data expire within 30 days after that.

5. Where the data lives

All customer data is stored on servers in the European Union (Hetzner, Finland), with encrypted backups in the same region.