v0 — under lawyer review. This is a working draft. A qualified lawyer will review it before the broader Phase 2 launch. Do not rely on this document for legal advice.

Legal · Last updated May 2026

Data Retention Notice

This notice explains how long Cultiv.ai keeps different types of data and what triggers deletion. We keep data only as long as needed to operate the program and meet legal obligations.

Retention schedule

Data typeRetention periodDeletion trigger
Lead / registration records24 months from last activityParent request or inactivity
Chat sessions (Ask Cultiv)90 days from creationAutomatic TTL — no manual step needed
Student profileDuration of cohort + 24 monthsParent request or inactivity
Parent consent records7 yearsRegulatory minimum — cannot be deleted early
Email logs (Resend)Per Resend default (~30 days)Provider policy
Sentry error logs30 daysProvider policy — PII scrubbed before transmission
GA4 analytics14 monthsProperty setting — anonymized traffic data only
Photo / video releasesDuration of cohort + 24 monthsParent revocation

Requesting deletion

You may request deletion of your data at any time by emailing privacy@cultiv.ai. We will respond within 30 days. Consent records and any records required by law are retained for the legally required period even after a deletion request.

Security during retention

All data is stored in Google Cloud Firestore (us-central1). Access is restricted to Ash (founder role) and the server. Parent data is never accessible to other parents. Sentry error logs have PII scrubbed automatically before transmission. GA4 data is anonymized and cannot be traced back to individuals.

Questions about this policy? privacy@cultiv.ai