Data retention
How long personal data is kept before it’s deleted. The GDPR says it shouldn’t be kept longer than its purpose requires.
The GDPR’s storage limitation principle says personal data shouldn’t be kept longer than needed for the purpose it was collected for. A retention policy sets those periods and what happens when they end: deletion, anonymisation or restriction.
Example: if you record a meeting only to write the minutes, keeping the audio for a few weeks may be enough; the approved minutes may have a different period. What matters is deciding, writing it down and sticking to it.
- A period per type of meeting or data.
- Automatic deletion, so it doesn’t depend on someone remembering.
- Backups covered by the same period.
Echo has automatic deletion after 7, 30, 90, 180, 365 or 730 days from upload, for your account or a whole team workspace, and it’s recorded in the audit log. What you delete by hand goes to the trash and is removed for good after 30 days. More on the security page.
