SiteSignal Data Retention Policy
Effective date: November 5, 2026
1. Scope and operator
This policy explains how long NetCoreSolutions.com LLC (NetCore Solutions), NetCoreSolutions.com, PO Box 61, Plainfield, IL 60544, keeps SiteSignal data. Contact details are also in the Privacy Policy.
How long we keep a record depends on what it is for. Report content, sign-in records, credit balances, and payment records each have their own schedule. A refund does not automatically delete a report or restart its retention period.
2. Retention schedule
| Record | How long we keep it | Notes |
|---|---|---|
| Free scan results and masked findings | 7 days after the scan finishes | Then deleted. If you buy the report or use a credit before then, it follows the paid-report schedule. |
| Each paid report version | 90 days after that version first becomes available | Includes findings, the report text, PDF inputs, and that version's AI conversation history. New chat activity does not restart the 90 days. |
| Recheck report version | 90 days after the recheck version becomes available | The original report keeps its own deadline; a recheck does not extend it. |
| Free-scan limit records | 30 days after the scan attempt | Only the website, a timestamp, and a keyed hash of the IP address, used to enforce free-scan limits. |
| Routine application logs | 30 days after the event | Job results, timestamps, error categories, and limited technical details. |
| Sign-in links and sessions | Until they expire or are revoked, then deleted within 30 days | Sign-in links expire after 15 minutes and sessions after about 12 hours. We store only hashed copies of these tokens. |
| Account, including your verified email | While you use your account, have reports available, or have unused credits | If an account has no unused credits, no available reports, and no open payment or dispute, we delete or de-identify it after 24 months without activity. We email you at least 30 days before we do. Closure requests are handled under Section 4. |
| Unused purchased credits and the records needed to honor them | Until the credits are used, refunded, or otherwise resolved | Credits do not expire. We keep the link between your account and your credits even if your reports expire or your account is inactive. |
| Purchase, refund, and accounting records | 7 years after the end of the calendar year of the transaction | Limited transaction IDs, amounts, currency, status, which credits or reports were bought, and the buyer link. This does not mean we keep report content for 7 years. |
| Support messages and support references | 24 months after the support matter is closed | Parts that become payment, incident, or legal records follow those schedules instead. |
| Record of your acceptance of the Terms and your "I'm authorized" answer | 7 years after the related scan, purchase, or account closure, whichever is later | Only the account or session link, timestamp, Terms version, and your answer. Never passwords or full scan evidence. |
When a report expires, normal access ends and our automated cleanup deletes it, usually within 7 days. That processing time does not extend your access. Earlier deletion on request follows Section 4. Backups follow Section 3.
The payment and acceptance-record periods are our recordkeeping schedules under applicable law; they do not mean every listed field is legally required for the whole period in every case.
3. Backups, providers, and copies
When we delete report content, we remove its findings, report text, chat history, and related report data that we control. Limited non-content identifiers may remain where needed for payments, credits, security, or legal records.
Deleted data may remain in our database host's restricted backups until those backups age out under the host's backup schedule. Backups are not used for normal service. If we ever restore a backup, we re-apply deletions before the restored data is used.
Our providers may keep their own records for delivery, fraud prevention, infrastructure security, billing, or legal compliance:
| Provider | What to know |
|---|---|
| Anthropic (Claude API), used through NCS-ai | Anthropic's published policy says it deletes API inputs and outputs within 30 days, except where it must keep flagged content longer to enforce its usage policy (up to 2 years) or by law. Anthropic does not train its models on API data. NCS-ai keeps only usage counts and costs, not your questions or answers. |
| Resend (email delivery) | Keeps sent-email and delivery logs under its own retention schedule. |
| Vercel (application hosting) and Hostinger (database hosting) | Keep request logs and backups under their own retention schedules, separate from ours. |
| Stripe | Keeps payment records under its own legal duties and privacy notice. Deleting your SiteSignal account does not require Stripe to erase records it must keep. |
Copies you download, email, forward, or store elsewhere are outside our control. Report expiry, account deletion, or a refund cannot remove them from a recipient's device, inbox, or backups. Do not rely on SiteSignal for permanent report storage.
4. Earlier deletion and account closure
Email admin@netcoresolutions.com or use the NetCore Solutions contact form to ask us to delete reports, conversations, or your account. We verify the request in a reasonable way and aim to act within 30 days after verification, or sooner if the law requires.
Deleting report content ends access to it. Closing an account may affect unused credits and open refund requests, so we explain the effects and handle any remaining balance under the Refund Policy rather than silently canceling paid credits. We keep only the limited information needed to resolve credits, follow the law, or meet an exception below.
We tell you when your request is done, or explain a lawful limitation where required. Deleting an account does not by itself erase payment records, acceptance records, or narrowly preserved incident or dispute records before their retention ends.
5. Limited exceptions
We may keep specific records longer when reasonably needed for an actual or reasonably expected legal claim, a legal hold, recordkeeping laws, a documented security incident, a fraud investigation, or an open payment dispute. We limit access to that purpose, review the need from time to time, and delete the records when the exception ends.
These exceptions do not allow keeping all customer reports indefinitely. Statistics we keep longer must no longer reasonably identify anyone; a keyed IP hash alone does not count as anonymous.
6. Changes and contact
We give notice of material changes as described in the Terms and Privacy Policy. We do not quietly shorten paid access we already promised or add an expiry to credits you already bought. If a legally required or urgent security change affects retention, we explain it and give you a chance to download your reports, or another appropriate remedy, where practical and lawful.
Contact: admin@netcoresolutions.com
Operator: NetCoreSolutions.com LLC
Mailing address: NetCoreSolutions.com, PO Box 61, Plainfield, IL 60544