Data Retention Policy
Last updated: July 4, 2026
Growlift keeps data only as long as it is needed to run the service, then deletes or anonymizes it automatically. The windows below are enforced by a daily compliance sweep, not by manual cleanup — the same values shown here are the values the sweep runs against.
| Data | Retention window | Notes |
|---|---|---|
| Search-engine results snapshots | 30 days | Raw SERP captures used to score keywords; deleted after this window. |
| Website crawl snapshots | 90 days | Cached copies of crawled pages used for analysis. |
| Google Search Console metrics | 24 months | Clicks, impressions, and position history that power your reports. |
| Audit logs | 365 days | Security and change history. Request IP addresses are anonymized after 90 days while the rest of the record is retained. |
| Webhook delivery de-duplication records | 30 days | Short-lived records that prevent duplicate webhook processing. |
| Data exports | Until expiry | Generated export files are deleted automatically once their download link expires. |
| Soft-deleted workspaces | 365 days | After a workspace is deleted it is retained for this window, then hard-deleted with all associated data. |
Account deletion
When you request account deletion, we begin a grace period and then permanently remove your workspace data. A minimal, non-personal record of the deletion is kept for our own audit and legal obligations.
Backups
Encrypted backups may retain data for a short additional period before they roll off on their own schedule. Backups are used only for disaster recovery.
Questions about retention or a specific deletion request? Email privacy@growlift.com. See also our sub-processor list and Data Processing Addendum.