SiteMinutes · Legal
Data Retention & Deletion Policy
Version 1.3Effective 13 October 2026
Contents
Version 1.3 — published 13 October 2026. It applies to new customers from 13 October 2026 and to existing customers from 12 November 2026. See What changed in 1.3 at the end.
This policy sets out how long SiteMinutes keeps information and how it is deleted. It forms part of the Terms of Service and the Data Processing Addendum.
1. Principles
- Your files stay with you. SiteMinutes is local-first: recordings, photos and working files are kept on your own devices. The apps never delete a recording by themselves, and deleted photos and plans go to a Trash folder on the device, not straight to oblivion.
- Keep only what is needed. Temporary copies (such as the audio uploaded for transcription) are deleted as soon as their job is done.
- Never delete for non-payment in a hurry. A workspace that stops paying becomes read-only; its data is kept for at least 12 months.
- Deletion is deliberate. Items you delete in the app are first marked as deleted ("soft delete") so mistakes can be undone, and are purged later.
2. Retention periods
| Information | Where | Kept for |
|---|---|---|
| Audio recordings (originals), including recordings made with Call audio on a Mac | Your device | Under your control. SiteMinutes never deletes them |
| Temporary audio copy for transcription | SiteMinutes storage (Frankfurt) | Deleted as soon as the minutes are written; an automatic daily clean-up removes any copy older than 7 days |
| Temporary audio copy of a Call audio recording | SiteMinutes storage (Frankfurt) | As for any temporary audio copy: deleted once the minutes are written, and within 7 days at most |
| Photos | Your device | Under your control (not uploaded in the current version) |
| Calendar data | Your device | The app lists invites on your device only. Nothing is stored by SiteMinutes beyond the details copied from the one invite you choose (date and time, venue or meeting-link type, attendee names and e-mail addresses), which are kept with the meeting and the project's people while the workspace exists |
| Transcripts, minutes, minutes review chat | SiteMinutes database | While the workspace exists (see sections 3–5) |
| Projects, meetings, attendance, actions, contract instructions, snags | SiteMinutes database and your devices | While the workspace exists |
| Plans and documents uploaded to a project | SiteMinutes project storage | While the workspace exists |
| Items you delete (soft-deleted records) | SiteMinutes database | Purged 30 days after deletion |
| Account information (name, e-mail, role) | SiteMinutes database | While the account exists; deleted or anonymised within 90 days after the account is closed |
| Pending invitations | SiteMinutes database | Until accepted or withdrawn; expired invitations removed after 90 days |
| Billing and payment records (no card numbers) | SiteMinutes database | 7 years after the end of the financial year they relate to (tax and company law) |
| Payment gateway callback logs | SiteMinutes database | 7 years, as billing records |
| Support tickets and messages | SiteMinutes database | 3 years after the ticket is closed |
| E-mails to and from help@siteminutes.com | Our Microsoft 365 mailbox | Up to 3 years, unless needed for longer for a dispute |
| E-mail delivery log (recipient, and the details needed to write and deliver each e-mail) | SiteMinutes database | 12 months, then deleted |
| Product-update broadcast records (subject, text, when sent) | SiteMinutes database | 24 months |
| E-mail provider's delivery logs | Resend | For Resend's own retention period (about 30 days) |
| Help assistant conversations | Your browser or app only | Not stored by our server (unless you attach them to a support ticket) |
| Help assistant fair-use counter | SiteMinutes database | 1 hour |
| AI usage records (no content) | SiteMinutes database | 3 years, for cost and abuse control |
| Legal acceptance records | SiteMinutes database | For the life of the account plus 7 years |
| Technical and security logs | Hosting providers | For the short period set by the provider (normally no more than 30 days) |
| Database backups | Supabase | Daily backups, rolling off after 7 days |
| Data at AI providers | OpenAI / Anthropic | OpenAI's transcription endpoint keeps no copy; Anthropic deletes API inputs and outputs within 30 days (up to 2 years if flagged for a usage-policy violation) |
3. When a trial ends without a subscription
The workspace becomes read-only straight away: you can view and export everything, but not create new minutes or invite users. We keep the data for 6 months. Before deleting it, we will e-mail the owner at least 30 days in advance. Subscribing at any time before that restores full access.
4. When a paid plan lapses (non-payment or cancellation)
- A failed or missing payment gives a 3-day grace period with full access.
- After that, the workspace becomes read-only. Nobody is removed, and export keeps working.
- The data is kept for at least 12 months after the workspace became read-only.
- After 12 months we may delete the workspace. Before we do, we will e-mail the billing owner and owners at least 30 days in advance, with a link to export.
- Paying again at any time before deletion restores the workspace exactly as it was.
5. Closing a workspace or an account on request
- The owner can ask us to close a company workspace. We confirm the request with the owner, give 30 days to export, then delete the workspace's content from our live systems within a further 30 days. Backups roll off within 7 days after that.
- A user can ask us to close their personal account. Records they created in a company workspace belong to the company and stay with it; the user's own account information is deleted or anonymised within 90 days.
- Billing records and legal acceptance records are kept for the periods in section 2 even after closure, because the law requires it.
6. Export
While an account exists, including while it is read-only, owners and members can export:
- minutes as A4 PDF;
- meeting packs (.zip with audio, photos, plans with pins, registers and transcript) from the apps; and
- minutes from the web app (print or save as PDF).
Ask support if you need a complete machine-readable export of a workspace; we will provide it within 30 days.
7. Requests from meeting participants
A person recorded or named in a meeting may ask for their information to be corrected or deleted. We refer the request to the customer that owns the meeting (the responsible party), who decides, because minutes may need to be kept as a true record (for example under a building contract). We help the customer carry out its decision.
8. Legal holds
We may keep information for longer than stated above where we are legally required to, or where it is needed to establish, exercise or defend a legal claim. We will delete it once the hold ends.
9. How deletion works
Deletion removes the information from our live database and storage. Copies in backups are overwritten as the backups roll off (within 7 days). Deleted information cannot be recovered after that.
What changed in 1.3
Version 1.3 replaces version 1.2. It applies to new customers from 13 October 2026 and to existing customers from 12 November 2026. In short:
- New operator. SiteMinutes is now a trading name of Deidre and Co (Pty) Ltd (registration number 2023/811635/07), a private company registered in South Africa, with its registered office at Regus Century City, The Colosseum, Foyer 3, 1st Floor, Century Way, Century City, Cape Town 7441, South Africa. Under section 20 of the Terms (Assignment), Deidre and Co (Pty) Ltd takes over every existing customer agreement from 13 October 2026 and honours it in full: your plan, prices, paid periods, data and settings stay as they are.
- South African law. The Terms are governed by South African law, and our POPIA Notice is now that of a South African responsible party. The consumer rights you have under the law of the country where you live are not affected.
- Rand only, through Paystack. All prices are charged in South African rand (ZAR). Card payments will be processed by Paystack (Paystack South Africa (Pty) Ltd, a Stripe company), our new payment provider. Until card payment through Paystack opens, you can pay by EFT on invoice through a support ticket.
- Version 1.2 dates stay. The changes announced in version 1.2 (sub-processors Resend and Microsoft 365, Mac Call audio, calendar invites, once-off payments with reminders, product-update e-mails) take effect on 30 October 2026, as announced.
If you are an existing customer and do not agree to version 1.3, you may cancel before 12 November 2026 and receive a pro-rata refund of any prepaid, unused period (Terms, section 18). Under the Data Processing Addendum you may object to Paystack as a new sub-processor before that date by writing to help@siteminutes.com.