Data Retention
Last Updated: 2nd September 2026
We would rather tell you what we actually do than publish a schedule we do not enforce.
GradWIN is early. Some retention behaviour is built and automatic; some is handled by our team on request; and for some categories we have not yet fixed a period. This page separates those three things honestly rather than implying everything is automated.
1.While your account is open
We keep your profile, Career DNA, experiences, evidence, assessments, saved insights, messages and activity for as long as your account is open, because the product does not work without them.
2.When you delete your account
You can request deletion from Account Settings. When you do, we delete the information attached to your account, including your profile, your Career DNA, your experiences and your evidence files.
We aim to complete deletion promptly. We are not yet publishing a guaranteed maximum number of days, because deletion today involves a manual step and we will not promise a deadline we cannot yet demonstrate we meet every time. If you need confirmation that your deletion has been completed, ask us and we will confirm.
Deletion requests are logged so that we have a record that the request was made and actioned.
3.What survives deletion, and why
- credential verification records, so that an employer who was legitimately given a verification code can still see that the credential existed and is no longer active
- safety, moderation and abuse records, where keeping them is necessary to protect other users
- administrative audit logs of actions taken by our team
- aggregate and de-identified analytics, which are not linked back to you
- anything we are legally required to keep
4.Where we have not set a fixed period yet
We have not implemented automatic time-based deletion for analytics events, moderation records, audit logs or backups, and we are not going to state periods that no job enforces. These categories are kept for as long as they remain necessary for security, safety, product integrity and legal obligations, and we are working towards defined, enforced periods.
Our infrastructure providers operate their own backup regimes. We are confirming those in writing and will publish them, along with a named subprocessor list, once confirmed.
5.Inactive accounts
We do not currently delete accounts automatically for inactivity. If we introduce that in future, we will tell you in advance and give you the chance to keep your account or export your information first.
6.Export before you leave
You can export a copy of your information from Account Settings, or ask us at hello@gradwin.app, before deleting your account.
7.Legal holds
If we are required to preserve information for legal proceedings or a regulatory investigation, we may keep it for longer — but only the specific information required, and only for as long as required.
8.Related
See our Privacy Policy for what we collect and who can see it.