Legal

Data retention policy

How long Buun Group Pty Ltd (ABN 75 687 193 675) keeps each kind of data it holds for Plotwork, and what removes it sooner. It summarises the "How long" column of the privacy policy, grouped the way a security review asks about it. Where the two differ, the privacy policy is the one that applies.

Last updated: 2026-10-24

TL;DR

Question	Answer
Do you keep my diagram source?	No, unless you choose to. Source is worked on in memory and not stored. It is kept only when you publish with `embedSource`, save in the portal's editor, publish to an organisation that keeps diagrams editable, save a board or a pattern, or an owner turns on agents publishing every diagram.
How long is a hosted diagram kept?	On Free, 30 days after you last publish it. On Pro, until you delete it. On Enterprise, the owner can set a shorter time.
How long is my account kept?	Until it is deleted. Delete it on the Settings page of the portal, or write to legal@buungroup.com (opens in a new tab).
How long are logs kept?	Organisation audit logs: 30 days on Pro, 365 days on Enterprise or what the contract or the owner sets. Organisation call history: about 90 days. Service log lines: the time Cloudflare's logging keeps them.
What stops deletion?	An Enterprise organisation's legal hold, while it is on.
What happens to backups and caches?	A deleted picture can stay in a cache for up to 1 hour, a stable link's copy for up to 1 minute. Short-lived copies in memory last at most a minute.

Diagrams

Data	Kept for
Diagram source sent to draw, check or convert	Not stored. It is worked on in memory to produce the answer.
Personal hosted diagrams	On Free, 30 days after you last publish it. On Pro, until you delete it.
Organisation diagrams	On a Free owner's organisation, 30 days after it was last published. On a Pro owner's, until it is deleted. On Enterprise, the owner can shorten it to 90, 180, 365 or 730 days without an update, unless an owner or admin keeps a diagram.
Previous versions saved by the editor	At most ten a diagram, deleted with the diagram.
Stable links	Until you delete the link or the account.
Public links to organisation diagrams	Until sharing stops, the diagram goes, or the owner turns public sharing off.
Live whiteboards, on Enterprise	Until the board is deleted, or the organisation's own retention passes with no change. History older than 90 days is removed.
Organisation patterns, on Enterprise	Until an owner or admin removes it, or the organisation is deleted.
Requests waiting for approval	At most 30 days waiting, and 30 days after the decision.

Data	Kept for
Your email address and account	Until the account is deleted.
Sign-in codes	A code works for 10 minutes. Codes older than one day are deleted.
Sessions	30 days after you last use one, or until you sign out.
API keys	Until the account is deleted. Revoking a key deletes its encrypted copy.
Agent connections and sign-in grants	A connection until the account is deleted. A registration up to 90 days, a refresh token up to 30 days, an access token one day.
Billing details (Stripe ids, plan, status)	Until the account is deleted. Card numbers are never stored by Plotwork.

Organisations

Data	Kept for
Members, roles, settings, brand, icons, style rules, folder rules	Until they are changed or removed, or the organisation is deleted.
Pending invitations	Until accepted or revoked, or 7 days after they were made.
Audit log	30 days on a Pro owner's organisation, 365 days on Enterprise or the days the contract sets, or one, two or seven years when an Enterprise owner chooses. On Free, none is kept.
Call history (who called, which key or agent, which tool, the outcome)	About 90 days. It never holds what a call drew.
Drift reports	90 days after the run on a plan with the drift dashboard.
Compliance evidence, on Enterprise	Checks and findings for the days the drift history is kept.
Events waiting to be sent to an organisation's own tools	Until they are taken, and at most one day.
Support requests	365 days after they were sent.

Usage and logs

Data	Kept for
Daily call counts per account	Until the account is deleted.
Anonymous daily usage totals	Kept as totals that name no one.
Service log lines	The time Cloudflare's logging service keeps them.
Audit trail of account actions	No automatic removal. It stays after the account is deleted, with the account id but no email address.
Rate limit counts by IP address	A window of 60 seconds.

Sales and analytics

Data	Kept for
Enterprise enquiries	24 months after they were sent.
Analytics on the website and the documentation, if accepted	Cookies last 13 months for Google Analytics and 365 days for PostHog. Each keeps the events for the period set in our project.
Sign-in and invitation emails	Held by Resend under its own policy.

Holds and deletion

Event	What happens
Legal hold, on Enterprise	While an organisation is on legal hold, its retention removes nothing.
You delete a diagram	The record and the picture go. A cached copy can stay up to 1 hour.
An account is deleted	Its sessions, keys, call counts, hosted diagrams, stable links and owned organisations go with it. The privacy policy lists each one.
An organisation is deleted	Everything it holds goes with it, apart from records the policy keeps on purpose, such as call history for its 90 days.

Page	Why
Legal center	Every policy in one place
Privacy policy	The full list of data, why it is kept, and your rights
Hosted diagrams	Publishing, links and expiry
Organisations	Retention and legal hold for a library