Data retention and deletion

What we keep, for how long, and how you delete it yourself.

What is kept by default

Data	Kept?
Your raw hologram	No. Decoded in memory and discarded within the request. A SHA-256 of it is recorded in the result.
The result ZIP you downloaded	Yes, as an audit trail, with no automatic expiry.
Feedback you send on a run	Yes, only if you send it, with emails and phone numbers stripped.
Account record (email, password hash, plan)	Yes, while the account exists.

Keeping your raw uploads (opt-in)

Off by default. If you want us to keep your raw frames, for example so a run can be re-checked later against the exact input, turn it on:

curl -sS -X PUT https://api.apertureapi.com/users/me/retention \
  -H "Authorization: Bearer $APERTURE_API_KEY" \
  -H 'Content-Type: application/json' \
  -d '{"retain_raw_inputs": true}'

GET https://api.apertureapi.com/users/me/retention shows the current setting. Turning it off stops new uploads being kept; it does not delete frames already kept (use the delete call below for that).

Deleting your data

curl -sS -X DELETE https://api.apertureapi.com/users/me/data \
  -H "Authorization: Bearer $APERTURE_API_KEY"

This deletes, for your account: every archived result package, every kept raw upload, your run feedback and your usage-event records. The response is a receipt:

{"deleted": 12, "held": 0, "remote_copies_pending": 12, ...}

deleted — result packages removed from this service. The archive log keeps a deletion record (archive ID, checksum, time, who asked) in place of each one, so the audit trail shows that a deletion happened, not what was deleted.
held — packages kept because a legal or regulatory hold applies to them. They are deleted when the hold is released. If every package is held the call returns 409 with code DATA_UNDER_LEGAL_HOLD.
remote_copies_pending — result packages also have a copy on our separate storage host. Those copies are removed by the operator, not by this call; this count tells you how many are still waiting. Email system@apertureapi.com if you need written confirmation.

Your account itself is not deleted by this call. To close the account, email system@apertureapi.com from the address you signed up with.

Results from the no-account form

Results from the browser form or /public/reconstruct are not tied to an account, so there is no self-serve delete for them. Email system@apertureapi.com with the evidence_report_id or the time of the run and we will remove them.