Data Retention Policy

Overview

MailMyPDF retains user data only as long as necessary to provide the service and comply with legal record-keeping requirements. This document describes what data we keep, how long we keep it, and how users can request deletion.

Unpaid Draft Orders

Draft orders (created but never paid) are automatically deleted after 24 hours. The uploaded PDF and all associated database records are permanently removed by an automated cleanup job.

Completed Orders

Paid and mailed orders are retained for 7 years from the delivery date. This retention period aligns with standard legal record-keeping requirements for mailed correspondence. Enterprise tenants can configure custom retention periods.

Audit Logs

Security and operational audit logs (rate limit hits, auth events, admin actions) are retained for 90 days for incident response and security investigation purposes.

Rate Limit Data

Rate limiting data (IP addresses and timestamps) is auto-expired within 2 hours and does not persist long-term.

Your Rights

You have the right to request deletion of your data at any time. Send a deletion request to our support email, and we will delete all orders, PDFs, and event history associated with your email within 30 days of verifying your identity.

You also have the right to export your data — including all order records, PDF documents, and mailing metadata.

Contact

For data retention, deletion, or export requests, contact us at the support email listed in the footer of this site.