Security logs and usage logs are kept for up to 90 days under normal circumstances and then deleted or anonymised. We may keep certain logs beyond 90 days where it's necessary to investigate an active security incident, comply with a specific legal obligation, or resolve an ongoing dispute, and we delete them once the reason for keeping them no longer applies. </p> <p>Audit logs (records of administrative actions, enforcement decisions, and account changes) are kept for as long as we need them for accountability, appeals, dispute resolution, and legal compliance, and reviewed periodically.</p>