# Data & Privacy

What GrackerAI stores, how long we keep it, and how to control it.

---

## What We Store

**Customer-provided data:**
- Account info (name, email)
- Monitors, prompts, brands, and workspace settings you create
- Team member info

**Generated data:**
- AI responses captured against your prompts
- Citation data
- Usage analytics within GrackerAI

**Operational data:**
- Login history
- API usage logs
- Audit logs

---

## Data Residency

| Option | Availability |
|---|---|
| **US (default)** | All plans |
| **EU residency** | Scale and Enterprise plans |
| **Multi-region** | Enterprise only |

To request EU residency, contact [privacy@gracker.ai](mailto:privacy@gracker.ai).

---

## Retention

| Data Type | Retention Period |
|---|---|
| Account info | While account is active + 30 days post-deletion |
| Monitors and prompts | While account is active + 30 days post-deletion |
| AI responses | 24 months by default - configurable on Scale and Enterprise |
| Citation data | 24 months by default - configurable on Scale and Enterprise |
| Audit logs | 12 months |
| Operational logs | 90 days |

---

## Your Deletion Rights

You can delete at any time:

| What | How |
|---|---|
| **Individual records** (prompts, monitors, responses) | Delete from within the dashboard |
| **Specific data categories** | Submit a request to [privacy@gracker.ai](mailto:privacy@gracker.ai) |
| **Entire account** | Not self-serve today - submit a request to [privacy@gracker.ai](mailto:privacy@gracker.ai) |

Hard deletion completes within **30 days**. Backup copies are purged within **90 days**.

We honour GDPR and CCPA rights for all customers regardless of location. Submit any request to [privacy@gracker.ai](mailto:privacy@gracker.ai) - we respond within 30 days.

---

## Subprocessors

| Subprocessor | Purpose |
|---|---|
| **AWS** | Hosting and storage |
| **OpenAI, Google, Microsoft, Perplexity, xAI, Anthropic, DeepSeek** | AI model APIs (for response capture only) |
| **Stripe** | Payment processing |
| **Sentry** | Error monitoring (PII-redacted before logging) |

For the full subprocessor list, contact [support@gracker.ai](mailto:support@gracker.ai).

---

## DPA & Privacy Policy

- **Data Processing Agreement** - available for all customers; contact [support@gracker.ai](mailto:support@gracker.ai) to request a copy
- **Privacy Policy** - [gracker.ai/privacy](https://gracker.ai/privacy)
- **DPO contact** - [privacy@gracker.ai](mailto:privacy@gracker.ai)

---

## Customer Rights (GDPR / CCPA)

We honour these rights regardless of your location:

- Right to access
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to data portability
- Right to object or restrict processing

---

## Next Steps

- [Security & SSO](/docs/account/security-sso): encryption, access controls, and compliance certifications