# Data retention

> **Draft — pending review by a solicitor. Not yet in force.**

Last updated: 10 October 2026

How long Fyle keeps your files, versions and account data, and exactly what happens after a subscription ends: 30 days read-only, locked until day 60, final notices until day 90, then deletion. Enterprise contracts can set their own timeline and legal hold.

## 1. While your subscription is active

Your files stay in Fyle until you or someone with permission deletes them. Committed versions are never overwritten: every save creates a new version, and conflicting changes become a branch rather than replacing someone's work.

- **Version history:** Proposed: Personal plans keep versions for 180 days, Team plans for 1 year, Enterprise as configured. Versions count toward your storage allowance.
- **Deleted files:** Deleted files go to the trash first and can be restored for [trash period] before they are removed.
- **Agent sessions:** The record of each agent session (which agent, which files it changed, what was reviewed) is kept with the version history.

> **Open decision:** Version retention periods and the trash period are not final; they will be confirmed before launch.

## 2. After a subscription ends

A subscription ends when it is cancelled and the paid period runs out, or when payment fails and the grace period passes. Your data is not deleted straight away. It moves through these stages, counted from the day the subscription ends:

| When | Stage | What you can do |
| --- | --- | --- |
| Day 0–30 | Read-only | Mount your files read-only and download or export everything. No new changes and no new agent sessions. |
| Day 30–60 | Locked | Sign in, resubscribe or ask us for an export. Files can't be mounted. |
| Day 60–90 | Pending deletion | As locked. We send final notice emails before deletion. |
| Day 90 onwards | Deleted | File content, versions, metadata, search indexes and caches are deleted. Billing and audit records we must keep by law are retained. |

We email the organisation's owners and billing contacts when each stage starts. Resubscribing at any point before deletion restores full access with nothing lost.

## 3. What deletion covers

At day 90 we delete the organisation's file content, all versions and branches, file and folder metadata, search indexes, previews and caches. Deletion runs as an audited job.

Copies in our encrypted database backups expire within [backup retention period] of deletion. Files already downloaded to your devices stay on those devices until you remove them.

If you bring your own storage, we delete the objects Fyle created in your bucket. Your storage provider's own versioning, replication or backup settings are under your control.

## 4. What we keep after deletion

- Invoices and accounting records, as long as UK tax and company law requires (up to 6 years).
- A record that the organisation existed and that its data was deleted, so we can show deletion happened.
- Security and audit records we need to keep for legal reasons or to defend legal claims, for [period].

## 5. Enterprise

Enterprise contracts set retention, export and deletion terms, including legal hold, which pauses deletion of specific data until the hold is released. Where a contract says something different from this page, the contract applies.

## 6. Deleting your account

You can ask us to delete your account at any time. Your personal organisation follows the same timeline as a cancelled subscription unless you ask for earlier deletion. Files you created in a team organisation belong to that organisation and stay there. Your account details are deleted within [period].

## 7. Getting your data out

While your subscription is active and during the read-only stage, you can copy everything out through the Fyle folder, the CLI or the API. During the locked and pending-deletion stages, email [support@fyle.sh](mailto:support@fyle.sh) to ask for an export.