Data Retention and Account Deletion Policy

How long Projments keeps each kind of data, what deletes it, how to close an account, and what survives deletion because the law requires it.

Effective: 16 August 2026
Last updated: 2 October 2026
Version: 1.3

In short

Work content stays until you delete it or close the account — we do not expire your projects behind your back.
Delete your account yourself from Profile in any of our apps and it goes at once, files in object storage included — or ask us, and we complete it within 30 days.
Invoices and a minimal record of the account survive deletion, because tax and accounting law requires them.

This summary is for orientation only. The sections below are the document that applies.

1. The principles we apply#

We keep personal data only as long as it serves the purpose it was collected for, or as long as the law requires.
Work content belongs to the workspace that created it and is kept until that workspace deletes it. We do not impose a silent expiry on customer data.
Data that is inherently sensitive — screenshots above all — is kept for the shortest period that still makes the feature useful.
When we delete, we delete from the database and from object storage, not only from the interface.

2. Retention schedule#

Data	How long we keep it	What deletes it
Account and profile — name, email, password hash, avatar, settings	For the life of the account	Account deletion (§4): at once when you delete it yourself, within 30 days when you ask us to
Workspace content — projects, tasks, submissions, checklists, clients, contracts, expenses, sales	Until deleted by the workspace	Deleting the item, the project, the workspace, or the owning account
Files, sheets and drawings in object storage	Until deleted by the workspace	Deleting the file or its parent; deleting the workspace; account deletion. An unpaid or cancelled subscription does not delete them — see §5
Time entries and sessions	For the life of the workspace — these are business records your organisation relies on for payroll and invoicing	Deleting the project or workspace; account deletion
Screenshots and activity samples	The retention period your workspace sets in Settings → Snapshots (default 30 days); a project can have its own period	Deleted automatically, image and record together, by a daily job once older than the retention period; deleting the time session, the project or the account they belong to; and earlier on request from the workspace owner — see the note below
Chat messages, room posts and attachments	Until deleted by the sender, an administrator, or with the workspace	Message deletion; workspace deletion; account deletion
Call records — who, when, how long	For the life of the workspace. Audio and video are never recorded	Workspace deletion; account deletion
3D room scans and their plan previews	Until deleted by the account that owns them. Scans survive deletion of a workspace, because they belong to the person who captured them	Deleting the scan in the 3D Room Scanner app or in the web library; “Remove from cloud” in the app, which deletes the cloud copy and keeps the one on the phone; account deletion
Notifications and device push tokens	Notifications until dismissed or superseded; tokens until the device unregisters or signs out	Sign-out, uninstall, account deletion
Billing and invoice records	The period tax and accounting law requires — commonly 5 to 10 years, depending on jurisdiction	Expiry of the statutory period. These records SURVIVE account deletion
Support requests and their messages	Up to 24 months after the request is closed	Automatic expiry, or earlier on request where no dispute is open
Audit records of administrative actions	Up to 24 months, as evidence in abuse and security investigations	Automatic expiry
Password reset tokens	Minutes — they are single-use and short-lived, and stored only as a hash	Use or expiry
Rate-limit counters	Minutes to hours	A scheduled sweep clears expired windows
Server and diagnostic logs	Up to 90 days	Automatic rotation
Backups	Rolling, up to 30 days	Deleted data disappears from backups as the rotation passes it. We do not restore a backup to recover data you asked us to delete

3. Getting your data out#

Export before you delete — deletion is not reversible.

Reports export to Excel and PDF from the Reports section, including time, tasks, expenses and sales.
Files and sheets download individually from the workspace.
Room scans export as a plan bundle from the scanner library.
If you want everything at once, ask for a full export in our Support Center and we will provide it in a machine-readable format within 30 days.

4. Closing your account#

You can delete your account yourself, from whichever of our products you use. Projments and the 3D Room Scanner share one account, so deleting it from either product deletes it for both — the confirmation dialog says so before you agree.

How to delete your account

In the 3D Room Scanner Android app: open Profile, tap Delete account, and confirm with your password.
In the Projments Android app: open Profile, tap Delete account, and confirm with your password.
On the web: sign in and open your profile — in Projments, your workspace’s Profile page; in the 3D Room Scanner, projments.com/3d-room-scanner/profile — then choose Delete account and confirm with your password.
If you can no longer sign in, raise a request in our Support Center instead and say clearly that deletion is what you are asking for. We verify that the request comes from the account holder before acting on it — we will not delete someone’s work because a stranger knows their email address — and complete it within 30 days.

What happens then

Deletion is immediate and cannot be undone. There is no grace period, so export anything you want to keep first (§3).
Any Projments subscription, 3D Room Scanner pack or extra-storage add-on on the account is cancelled at the same time. They are cancelled, not refunded — if you are owed a refund for an unused pack or period under the Refund Policy, claim it before you delete.
Every device signed in to the account is signed out.
The account’s rows are deleted from the database and its files from object storage. Backups follow the rotation in §2.

What is deleted

Your profile, credentials, settings and sessions.
Your time entries, sessions, screenshots and activity records in workspaces you own. What you logged in a workspace someone else owns stays there (below).
Your device tokens, notifications and personal preferences.
Room scans you own, with their plan previews. When you delete from the 3D Room Scanner app, the scans stored on that phone are removed as well.
Workspaces you own and the content in them, including other members’ content in those workspaces.

What survives, and why

Invoices and payment records — retained for the statutory tax and accounting period. They name you and the amounts; we cannot lawfully delete them on request.
Audit and security records of administrative actions, kept for their retention period as evidence in investigations.
Content in workspaces you do not own — messages you sent, tasks you completed, time you logged for someone else’s organisation. That is their business record, held under their lawful basis, and it is theirs to delete. It stays attributed to “Deleted user”: your name, email address, password and photo are removed from the account it points to, and nobody can sign in to it again. Ask that workspace’s owner for anything further.
Backups, until the rotation described above passes.

5. Suspension, downgrade and inactivity#

A suspended account cannot sign in, but its data is retained while the suspension is resolved.
Downgrading to the Free plan does not delete data. What it does is enforce Free-plan limits — features stop, and storage above the allowance can no longer grow.
A subscription that ends — cancelled, or unpaid after a failed renewal — does exactly the same thing. The account is locked to the Free plan and every project, task, expense, sale, time record and file it holds stays where it is. Pay again and all of it returns, untouched, with nothing to restore.
Nothing is deleted on a timer for non-payment. If a long-expired account is holding a large amount of storage we may eventually remove it, but only as a deliberate decision taken by an administrator and recorded, never automatically. Write to us and we will tell you what we hold.
We do not currently delete accounts for inactivity. If we ever introduce an inactivity policy, we will give at least 60 days’ notice by email before it applies to you.

6. Requests from team members#

If you are a member of someone else’s workspace and want your screenshots, time records or messages deleted, that decision belongs to the workspace owner: it is their record, kept under their lawful basis, and we process it on their instructions. Ask them first. Write to us if they do not respond and we will pass the request on, tell you what we hold, and delete anything we hold as controller — your account, credentials, sessions and preferences — which we can always do.

7. Contact#

Deletion and export requests, and general help: our Support Center. See also the Privacy Policy and the Terms of Service. This version is 1.3, effective 16 August 2026.