Attachment to the company data information September 26, 2026
Retention and deletion
Access requests and confirmations
Confirmation and activation links are time-limited and invalid after use. The underlying request remains stored separately. As tested, there is no proven automatic deletion process for access requests that have not been completed. Such requests must be deleted after the purpose of processing or preventing misuse no longer applies; No deletion may be derived from the expiration of a link.
Active accounts and contract data are required for the execution of the contract. Confirmation certificates are used for information and proof purposes, not for advertising. Your further storage depends on the specific contractual relationship, legal obligations and outstanding claims. Evidence that is no longer required must be deleted.
Operational data and copies
Your company determines the required storage of its projects, emails, contacts, tasks, personnel, warehouse and billing data. Legal obligations differ depending on the type of document. There is no general legal retention period for all emails or project information.
When further processing an email, independent tasks, documents, contacts or commercial drafts may arise. A deletion instruction must include these repositories, external shares, exports, connected mailboxes, and recipients. Klarvexo cannot independently retrieve copies that recipients have already stored outside of Klarvexo.
A user is not the entire company
Personal account deletion removes or anonymizes those in the Privacy Policy account details described. Required operational histories can continue to exist without the previous display name. Pseudonymization does not automatically mean complete anonymization of all free texts and documents. The deletion of an entire company must be ordered separately, checked for reasons for retention and documented.
Fuses
Regular platform and company backups are designed to be rolled out over seven days; For companies, a maximum of 28 regular security points are provided. In addition, protective copies of the encrypted backup inventory run on the separate backup server. Three such copies remain in the operational template. They may contain older regular savepoints that have already been removed from the active saveset.
Therefore, “seven days” does not mean that every backup copy will disappear after exactly seven days. Additional fallback points, recovery processes, failed cleanup runs or necessary preservation of evidence can influence the duration. In the event of a binding deletion, these stocks must also be checked. Locked backup data is not used for normal specialist processing; During a restore, already documented deletions must be implemented again.
Protocols and end devices
The rolled web server access logs are configured with 20 MB per file, a maximum of ten archive files, and an archive retention of 720 hours. The active log file is rotated depending on its size. The setting therefore does not guarantee that each individual entry will be deleted on a calendar day-specific basis. Requested URLs may contain search terms.
No separate Docker rotation limit was set for the app container protocols during the reading test on September 26, 2026. There is no guarantee that all operational logs will be automatically deleted after a fixed number of days. Security incidents and evidence that must be retained must be treated separately.
Downloaded files, device backups and self-created exports are also subject to the management of your company. Disconnecting a session does not automatically remove every previously exported file.
AI service and other recipients
The external AI service and other recipients have their own contractual storage and deletion rules. The removal of the source document in Klarvexo does not prove immediate deletion by the service provider. Provider information and the limits of the evidence can be found in the Service provider overview.
Request deletion
Stands for yourself Delete account available. Company-related information, export and deletion instructions can be sent to authorized contacts info@sc-v.de direct. We must first check the authorization and the extent of data affected. Legally required remaining stocks must be documented separately according to purpose, deadline and access restrictions; an open reason for retention does not justify unlimited storage of all data.