Data Retention Policy

This policy exists because the documents you submit are frequently confidential and often haven't been covered by an NDA with PEFG. The goal is straightforward: keep your source documents for only as long as it takes to deliver your review, then delete them.

Default: 30 days, then automatic deletion

The document(s) you upload — and every intermediate copy created to process them, including the copy held by our AI provider for the duration of the review — are automatically deleted 30 days after your job completes. This is shown on the intake form before you upload anything, not just here.

• Your generated report (PDF and XLSX) and the findings themselves are retained beyond the 30-day window, so you can still access your report and order history in your portal — only the source document bytes and processing copies are deleted.
• If you purchase Personal Expert Review, the document you send for that review is subject to the same 30-day deletion.

Delete sooner

A "Delete now" control is available in your portal for any completed order. Using it permanently deletes the source document(s) you uploaded — and every processing copy, including the copy held by our AI provider — immediately. This cannot be undone, and it does not entitle you to a refund if you use it after your report has already been released.

"Delete now" does not delete your generated report or findings — see "What is retained, and why" below for why we keep those regardless of when, or whether, you delete the source document.

What is never retained beyond processing

• Raw uploaded files are never used as training data, fine-tuning data, or product examples without your separate written opt-in — see the Privacy Policy.
• We do not keep a backup archive of deleted source documents outside the normal deletion process; once the retention job or a "delete now" request runs, the copies in our storage provider and our AI provider are removed.

What is retained, and why

• Order and billing records — retained as required for accounting, tax, and legal purposes.
• Consent records (the disclaimer text, version, timestamp, and IP address you accepted at checkout) — retained indefinitely, since they're the record of what you agreed to.
• Findings and the generated report itself (the work product we deliver to you) — this is retained by PEFG, separately from your source document and independent of your portal access to it, for as long as applicable recordkeeping laws, regulations, or potential legal claims require. This is not on a fixed calendar (unlike the 30-day source-document window above) and is not affected by your own "delete now" request or the deletion of your source document — PEFG keeps its own copy of every report it delivers as a business record of what was actually provided to you, including for its own accounting and legal-defense purposes.

Confidential documents and NDAs

If your documents require a signed NDA before you're comfortable uploading them, one is available on request — see /legal/nda. This retention policy applies regardless of whether an NDA is in place; the NDA adds a contractual confidentiality obligation on top of it.

Questions

support@pefgconsulting.com