Data retention
We don't store your content. What we keep, for how long, and what Vault customers keep.
Draft pending legal review
The periods below follow Sieve's plan. Items marked "pending legal review" are not final. This page will be reviewed by counsel before it is treated as our policy. It forms part of the Master Customer Agreement and the Privacy Policy.
Our promise
We don't store or log your prompts, states or answers. They are processed in memory only. Request bodies are never logged.
Your content passes through the gateway, the model engine, GPU memory (a per-organisation cache) and safety filters, in memory only.
What we do keep
We cannot keep zero data. Indian law requires some records.
| Data | Kept for | Why |
|---|---|---|
| Request metadata: time, IP address, key ID, request ID, status and token counts. No content. | At least 180 days, with a copy in India (CERT-In), and at least 1 year (DPDP Rules) | Security and legal duties |
| Safety scores | At least 1 year | Abuse defence, DPDP Rules |
| Flagged content, for organisations without a zero-data-retention contract | 30 to 90 days (pending legal review) | Abuse review under the Acceptable use policy |
| Child sexual abuse material, if found | Preserved and reported as the law requires, for 180 days or as police direct | Legal duty (IT Rules 2021, POCSO) |
| Subscriber details (validated name, address, phone, sign-up IP and time) | 5 years after the account closes (pending legal review) | CERT-In direction |
| Invoices, credit notes and GST records | 72 months from the annual return due date, longer if a case is open | CGST Act s.36 |
| Ledger and books of account | 8 financial years | Companies Act s.128 |
| Income-tax records | 7 tax years | Income-tax rules (pending legal review) |
| Payment, refund and dispute records (tokens only, no card data) | Within the books period | Books and GST rules |
| Admin audit log | At least 1 year | DPDP Rules, security audits |
| Account data: email, name, two-factor settings | Scheduled erasure after a 30-day deletion grace period and delivered advance notice. Financial records stay. | DPDP Act s.8(7) |
| Job applications (CV and contact details) | 12 months after the hiring decision, or sooner if you ask (pending legal review) | Hiring |
| Sieve Foundry training data and custom adapters | Contract term plus 30 days. Stored only because you ask us to. | Your own model |
| Cached model state (prefix cache) | Minutes, in GPU memory, per organisation, until evicted | Speed |
We must also report security incidents to CERT-In within 6 hours.
Honest caveats
- A content-delivery or load-balancing provider that ends TLS in front of the API (for example Cloudflare, if we use it) decrypts traffic at its edge and can see content in transit. Any such provider is a sub-processor. The providers are not named yet because hosting is not final.
- Flagged content is kept for the period above unless you have a zero-data-retention contract.
Zero-data-retention agreements
Enterprise customers can sign a zero-data-retention agreement and a data processing agreement. It removes flagged-content retention. It does not remove the legal records above. The agreement terms are not final yet.
Vault
Vault runs in your own cloud. Sieve never sees your content or logs. See Vault install.
Our wording
We don't store or log your prompts, states or answers. They are processed in memory only. We keep request metadata, such as time, key ID, IP address, token counts and safety scores, as Indian law requires. Enterprise customers can sign a zero-data-retention agreement that also removes flagged-content retention. Child sexual abuse material is always preserved and reported as the law requires.
Deletion requests and implementation limits
Organisation admins can schedule deletion in Organisation settings; personal account deletion is in Account & security. See Delete or transfer. Requests have a 30-day grace period and can be cancelled before erasure. Failed notice delivery or unresolved financial obligations delay erasure.
The application records retention eligibility dates and preserves financial evidence. Automated final purge of retained financial/security records, backups and service-owned model assets is not complete. The periods above remain draft policy pending legal review; they are not a statement that every external system already performs automatic deletion.
Next steps
Last updated