> ## Documentation Index
> Fetch the complete documentation index at: https://docs.attensira.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Data retention

> How long Attensira keeps screenshots, chat attachments, uploads, emailed replies, outreach contacts and threads, and the suppression list, and what you see once something has been removed.

Some of what the agents handle is personal data: a screenshot of a page a browser run opened, a file you attached to a chat, an address found for an outreach pitch, a reply from someone you wrote to. Each kind is kept for a fixed period and then deleted on its own. Nobody has to run anything, and the periods are the same for every workspace: they cannot be changed per workspace.

## What is kept, and for how long

| What | Kept for | Then |
| - | - | - |
| Screenshots a browser run took of each step | 30 days | Deleted. The step stays in the [run replay](https://docs.attensira.com/agent/what-the-agent-shows.md), and its frame says **removed after 30 days** |
| Files attached to a chat, and the text read from them | 90 days | Deleted, with the text the agent read from them |
| Files uploaded to hand to an action ([`POST /v1/uploads`](https://docs.attensira.com/api/sessions#post-/v1/uploads), or `upload` over MCP), with their name and size | 1 day | Deleted. An upload an action used is deleted at once: the action keeps its own copy, as an answer you attached in the app does |
| The copy of a deliverable behind a download link that `get` returned | 1 day | Deleted. The link itself stops working after an hour |
| The record that an emailed reply was received ([reply to act](https://docs.attensira.com/account/reply-to-act.md)) | 30 days | Deleted. It holds which email it was, never the words |
| Retry counts for an emailed reply we could not fetch | 3 days | Deleted |
| An outreach reply that matched no thread | 30 days | Deleted |
| A contact found for an outreach draft nobody sent | 30 days | The address is removed. The draft stays |
| An outreach thread: the recipient, the follow-ups and the replies | 1 year after the thread started | Deleted |
| The outreach emails sent and received | 1 year after each was sent | Deleted |
| The record of why a contact was written to and where their address was found | 2 years after they were first written to | Deleted. A later pitch to them writes a new one |
| The [suppression list](https://docs.attensira.com/offsite/outreach-rules.md#the-suppression-list) | For good | Kept, but only as a one-way hash of each address, never the address itself |

Deletion happens automatically once the period is over. It can take up to two days after that for an item to be gone everywhere.

## The suppression list keeps no addresses

An address on the suppression list must never be written to again, so the list is never cleared. To keep it without keeping anyone's address, each entry is stored only as a one-way hash of the address (lowercased, with any `+tag` removed). A pitch to that address, or to any alias of it, is still refused, because the same hash comes out.

[`GET /v1/suppressions`](https://docs.attensira.com/api/endpoints#get-/v1/suppressions) lists each entry's `email_hash`, its reason and its date. To check whether an address is on your list, hash it the same way: the hex SHA-256 of the address, lowercased, trimmed, and without a `+tag`.

## What is not on this schedule

The work itself stays with your workspace: the documents and images the agent made, the answers you gave to an agent's questions in your [Inbox](https://docs.attensira.com/agent/inbox.md), your company facts, and your measurements. Those are not personal data about someone else, and they are what the agents work from.

All of it goes when you [delete your account](https://docs.attensira.com/account/delete-and-export.md#delete-your-account), and you can [download it](https://docs.attensira.com/account/delete-and-export.md#download-your-data) first. A person you wrote to can be [erased](https://docs.attensira.com/account/delete-and-export.md#erase-one-outreach-contact) from a workspace at any time; their address then stays only as a hash on the suppression list.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.