Data handling and retention

This policy describes specific app behavior. It does not replace the Privacy Statement, your service agreement, or deployment-specific data arrangements.

Use only the information needed#

Company, contact, billing, agent request, and support records support the selected company's operations. Provide accurate information and avoid adding credentials or unrelated sensitive data to free-text fields or attachments.

Company edits apply to future invoices. Issued invoices retain their recipient details and document history; request a correction through Support when needed rather than assuming a profile edit rewrites them.

Temporary drafts#

Supported company and agent-request drafts use browser session storage, scoped to the account, company, and tab. They can be restored for up to 24 hours when storage is available. Saving, explicitly discarding, or successfully logging out clears them.

Draft recovery is not a backup of every form. Cleared storage, another browser or tab, expiry, and unavailable storage can prevent recovery. Review recovered values before submitting. See Recover unsaved changes and save conflicts.

Support files and retention#

A support upload session expires after 24 hours. Completed attachments are scheduled for removal 90 days after the request is closed. Reopening before removal cancels the deadline. Reopening after removal does not restore the file; request text history is separate from attachment retention.

This 90-day rule is specific to support attachments. It is not a blanket retention period for accounts, billing records, agent data, backups, or an AI workspace. Keep your own required records and confirm applicable retention arrangements with Coryntas.

Data questions and requests#

For access, correction, deletion, or a deployment-specific retention question, use the contact route in the Privacy Statement or Support. Identify the relevant record without sharing passwords, authentication links, or unnecessary confidential content.

The Trust Center explains published security controls and their scope. This page makes no new certification or universal data-residency claim. Related guidance: Company details and Support attachments and guest access.