Image data
Source photos aren't stored on our servers — they're forwarded to our AI inference partner during generation, then leave our systems. Finished headshots: thirty days from the shoot timestamp. After that we permanently delete them.
Account-adjacent data
Email address (the one you entered at checkout), Stripe customer id, payment record (amount, currency, timestamp): retained for the period applicable tax-and-accounting law requires, typically up to ten years in the EU. The image itself is not retained — only the financial metadata.
Logs
HTTP access logs (IP, user agent, path, status, timestamp): retained for ninety days for security and abuse prevention, then rotated out automatically.
How to delete sooner
Email legal@keva.studio with "Delete my data" in the subject line, from the address you used at checkout. We will scrub all image data and free-text fields within thirty days, and confirm by reply. The financial record stays — we are legally required to keep it.