Data Retention and Deletion Policy
This Data Retention and Deletion Policy describes how NEBULONS AI handles the lifecycle of Customer Data submitted to the NEBULONS AI Studio platform. It reflects a single governing principle: NEBULONS AI keeps Customer Data only for as long as the Customer's instruction requires, protects it with strong technical safeguards while it exists, and deletes it permanently, verifiably, and promptly when that instruction ends or when the Customer asks for deletion.
NEBULONS AI does not operate a data warehouse of Customer content. Datasets, prompts, outputs, checkpoints, and logs containing Customer Data exist within the platform only while a Customer-initiated operation — an upload, a preparation job, a training run, an evaluation, or an inference request — is in progress. When the operation completes, the working copies associated with that operation are deleted from active storage automatically. NEBULONS AI does not retain Customer Data for product analytics, benchmarking, research, marketing, or model improvement purposes of any kind.
Artifacts that the Customer explicitly chooses to persist — for example a trained model checkpoint the Customer asks the platform to keep available for deployment — are stored only for that Customer, in the Customer's isolated environment, encrypted at rest, and remain under the Customer's control. Such artifacts can be deleted by the Customer directly through the platform at any time, or upon written request to NEBULONS AI support.
Encrypted system backups exist solely for disaster recovery. Because of the zero-retention architecture, backups in which Customer Data may transiently reside are rotated and overwritten on a rolling cycle that completes no later than thirty (30) days after the underlying data was deleted from active systems. Backup media are encrypted with AES-256, and no Customer Data from backups is ever restored for any purpose other than disaster recovery of an active Customer environment.
A Customer may request deletion of any or all of its data at any time by using the deletion controls in the platform or by contacting NEBULONS AI support from an authorised account contact. Upon such a request, active copies are deleted within twenty-four (24) hours, and backup copies are permanently destroyed within the current rotation cycle and in no event later than thirty (30) days from the request. Upon full account termination, all remaining Customer Data is deleted on the same timeline.
On written request, NEBULONS AI issues a signed Deletion Certificate confirming the categories of data deleted, the deletion method (cryptographic erasure or secure overwrite), and the completion date. Deletion is permanent and irreversible; NEBULONS AI cannot recover Customer Data after the deletion timeline has completed, and Customers are advised to export any artifacts they wish to keep before requesting deletion.
Limited non-content operational records — such as billing records, account identifiers, and security audit logs that are required by law, tax, or legitimate security purposes — are retained only for the minimum statutory period applicable, are access-restricted, never contain the content of Customer datasets or model outputs, and are themselves deleted when the retention period expires.
NEBULONS AI reviews this policy at least annually and upon any material change to its architecture. Material changes that reduce Customer protections take effect only after notice to Customers; changes that strengthen protections apply immediately.