This Policy explains how long Eccleston Education Consulting LLC, operating as IEPVue, keeps different categories of information and what happens when information or an account is deleted. It should be read with our Privacy Policy and Security Overview.
The short version: Original documents are temporary. Profiles, reports, drafts, and optional memory that you choose to save can remain in your account until you delete them or delete the account. Some operational, billing, consent, security, and legal records must be kept longer. Canceling a subscription stops renewal; it does not automatically delete the account.
| Information | Normal retention | What ends retention |
|---|---|---|
| Unused upload authorization | Up to 60 minutes. | Expiration or use. |
| Original source document and temporary processing copy | Only for the requested analysis. IEPVue requests deletion after confirmed completion, failure, or cancellation; a one-day storage-lifecycle rule is the backstop. | Terminal processing state or lifecycle expiration. Final provider removal may take additional time. |
| AI-provider request and response data | IEPVue does not opt in to general-purpose model training. A commercial AI provider may keep inputs and outputs for a limited period—commonly up to 30 days under standard API terms—for abuse prevention, security, service operation, or legal compliance unless a different approved control applies. | Provider retention expiration, subject to the provider's documented exceptions. |
| Active chat context | For the active session or task unless the user deliberately saves the conversation or a limited memory. | Session completion, deletion, or account deletion, subject to provider retention described above. |
| Student profile | While the account remains open, until the user deletes the profile, or until the account is deleted. | User deletion or account deletion. |
| Saved reports, meeting materials, and editable drafts | While the account remains open, until the user deletes the item, or until the account is deleted. | User deletion or account deletion. A saved output may contain information derived from a source document even after the original document is gone. |
| Optional saved memory | Until the user edits or deletes it, the related profile is deleted, or the account is deleted. | User action or account deletion. Memory is intended to be a concise, visible summary—not a hidden copy of the original document. |
| Advocate Review source documents, if offered | Deleted after the human review is delivered and no later than seven days after delivery, unless the user requests earlier deletion or a dispute/legal hold applies. | Delivery plus the stated period, earlier request, or end of an applicable hold. |
| Advocate Review intake and delivered report, if offered | Available in the account until the user deletes it or the account is deleted, unless the service description states a shorter period. | User deletion or account deletion. |
| Account and authentication records | While the account is active, followed by the account-deletion workflow. Minimal security, fraud-prevention, transaction, or legal records may remain where necessary. | Account deletion and completion of required residual-retention periods. |
| Subscription, entitlement, credit, and purchase records | During the account relationship and, where needed for tax, accounting, contract, chargeback, fraud, or dispute purposes, up to seven years afterward. | Expiration of the applicable recordkeeping or dispute period. |
| Terms, privacy, and consent receipts | Version, timestamp, and minimal acceptance evidence for the account relationship and up to seven years afterward where needed to document the agreement or consent. | Expiration of the applicable contractual, dispute, or legal period. |
| Support messages | Normally up to three years after the request closes. Messages tied to billing, security, litigation, or a legal hold may be kept longer. | Expiration of the support period or end of the applicable exception. |
| Feedback and research responses | Normally up to 12 months in identifiable form unless the user authorizes another use or the record becomes part of a support, security, or legal matter. | Expiration, withdrawal where applicable, or de-identification. |
| Waitlist and marketing-contact information | Until the stated communication purpose ends or the person withdraws. A minimal suppression record may be kept to honor an opt-out. | Withdrawal, end of the program, or de-identification; suppression data remains as needed. |
| Privacy-filtered analytics | Normally up to 12 months in linkable form. Aggregated or de-identified information may be kept longer. | Expiration or de-identification. |
| Security and reliability logs | Normally up to 12 months. Evidence connected to a suspected incident, fraud, insurer notice, claim, or legal hold may be kept longer. | Expiration or resolution of the applicable exception. |
| Administrative audit records | Up to seven years when needed to establish who performed a sensitive administrative action and why. | Expiration of the security, contractual, insurance, or legal need. |
Canceling a paid plan stops future renewal according to the subscription terms. It does not by itself delete the account, student profiles, saved reports, drafts, or optional memory. This allows a user to retain control of saved work after canceling. To remove the account and account content, use the account-deletion control or contact [email protected].
When a user deletes an item, profile, or account, IEPVue removes it from ordinary user access and initiates the applicable deletion workflow. Deletion may involve multiple systems and service providers. Access is revoked first where appropriate; background deletion jobs and provider APIs then remove covered data from active systems.
Deletion is not always instantaneous and does not necessarily overwrite every physical storage location at the same moment. Limited copies may remain temporarily in protected backups until the ordinary backup cycle expires. Backups are isolated from normal product use and are used only for recovery, security, or legal purposes. If restored, deletion records are reapplied where technically feasible.
We may retain limited information longer when reasonably necessary to:
Information retained under an exception is restricted to the relevant purpose and is not returned to ordinary product use.
Service providers may maintain limited security, transaction, delivery, or backup records under their own contractual retention rules. IEPVue uses available contractual controls and deletion tools but cannot truthfully promise that every provider erases every protected copy immediately. The Privacy Policy identifies the provider categories and disclosures relevant to IEPVue.
We may update this schedule when a feature, provider, legal requirement, or operational need changes. A material change will be reflected in the “Last Updated” date and communicated when required. To request access, correction, deletion, or clarification, use Account Settings when available or email [email protected] with “Privacy Request” in the subject line. We may verify identity and authority before acting.