Active accounts and content
Account and published product data are kept while the account or item remains active. Draft uploads and processing jobs that never publish are eligible for automated cleanup after 30 days unless a retry, dispute, or safety hold applies.
Deleted accounts and content
A verified deletion request removes live account-owned records and stored media through every configured data owner. Legal acceptance records are deleted with the account. De-identified security and aggregate records may remain. Object versions and backups expire through documented storage lifecycle periods, targeted at no more than 90 days unless law or an active incident requires longer.
Sessions, tokens, and diagnostics
Access tokens expire in minutes, refresh sessions in 30 days unless revoked earlier, verification links in 24 hours, and password-reset links in one hour. Operational logs are targeted for 30 days and security audit records for up to 12 months, with access restricted to authorized operators.
Advertising and financial records
Rejected or abandoned creative assets are eligible for cleanup after 30 days. Campaign delivery and billing records are retained for the period required for reconciliation, fraud investigation, tax, accounting, disputes, and applicable law. Financial retention does not authorize reuse for unrelated advertising.
Holds and review
Facily may temporarily preserve specific records for a legal request, safety investigation, charge dispute, or security incident. Holds must be scoped, access-controlled, reviewed, and released when no longer required. This schedule is reviewed at least annually and when storage or legal obligations change.