Retention · Private preview
How long we keep your data.
Orbitrain keeps data only for as long as it serves the apprenticeship, protects the service, or meets a legal obligation. When the purpose ends, the data is removed.
Effective 27 August 2026
Retention periods by data type
| Data type | Period | Reason |
|---|---|---|
| Account and profile | Until you request deletion | Needed to operate your apprenticeship |
| Learning sessions and attempts | Until you request deletion | Forms your evidence and progression record |
| Capability evidence and states | Until you request deletion | Core of your Record and assessment |
| Judgement records and outcomes | Until you request deletion | Part of your evidence ladder |
| Room runs and debriefs | Until you request deletion | Practice history and progression |
| Mission attempts and events | Until you request deletion | Real-world transfer evidence |
| Workspace and canvas data | Until you request deletion | Your working documents and analysis |
| Source files and uploads | Until deletion or 90 days inactive | Storage hygiene; stale uploads cleaned automatically |
| Analytics events | 180 days | Product improvement and aggregate reporting |
| Email delivery records | 90 days | Delivery verification and bounce handling |
| Audit and security logs | 365 days | Security, fraud prevention, and legal compliance |
| Sign-in location records | 365 days | Account security and anomaly detection |
| Background job records | 30 days after completion | Operational debugging and retry tracking |
Deletion and export
You can request full data export and full account deletion through the product settings. Export produces a JSON file available for download for 7 days. Deletion removes all your data across every table and your authentication account. Both are irreversible. A confirmation email is sent before deletion completes.
Legal basis
Under GDPR, Orbitrain processes personal data on the basis of contract performance, legitimate interests, and legal obligation. Under CCPA, Orbitrain collects personal information for the business purposes of providing the service, securing it, and complying with legal obligations. You have the right to know, delete, and correct your personal information.