Understanding data retention policies

Understand what data BoodleBox keeps, for how long, how deletion works, and what AI providers keep.

Your content (chats, prompts, outputs, bots and knowledge files) is kept for as long as your account is active, so you can return to past conversations, reuse them and continue your work. There is no automatic expiry, and there is no setting today to auto-delete content after a set number of days.
Your content belongs to your account. For students, it travels with you after graduation. If you're removed from an institution's workspace, you lose access to that workspace, but your account and personal content are not deleted automatically.
BoodleBox performs daily backups that expire and are deleted after 30 days.

Chats, messages, files and bots: you can delete them at any time. A deleted chat is removed right away from your chats, folders, search and AI memory, and everyone it was shared with loses access. It is permanently erased from our systems when your account is deleted, or sooner if you ask us.
Your whole account: delete it yourself from Personal Settings → Password & Security (see How to delete your account). All of the account's content is removed within 30 days.
Institutions: an institution can request deletion of specific users' data, or all of its data, through support@boodle.ai. BoodleBox completes the request within 30 days, following secure-disposal procedures aligned with NIST SP 800-88.
Deletion confirmations are sent by email.

Every AI provider available in BoodleBox is contractually prohibited from training its models on BoodleBox data, and all data sent to providers is encrypted in transit.
Under their standard enterprise terms, providers may keep prompts and outputs temporarily for abuse and safety monitoring, for up to 30 days, after which the data is deleted. The exact period is set by each provider's terms, not by BoodleBox. We can share the retention terms for each provider on request.
Like any service provider, an AI provider can be legally required to keep data longer if it is subject to a court order or legal hold. If we become aware that a legal hold affects your institution's data, we will notify users as our contract and incident-response obligations require.

Full details are in the Trust Center: https://trust.boodlebox.ai/. For specific data-retention or DPA questions, email compliance@boodle.ai. General questions: reach out through our contact form.