Failed or incomplete uploads
Deleted after 7 days.
File retention
Keep each copy only as long as its job requires.
The owner approved the periods below. Live receipt remains closed until the storage rules and deletion evidence are applied and tested.
Separate records
Originals, working copies, reports, and payment records do not share one clock.
Originals and working files
Deleted 30 days after delivery.
Final reports
Available for 90 days after delivery, then deleted from customer-access storage.
Transaction records
Limited order and payment records are retained for 7 years without document contents.
Browser deletion
A paid customer can remove uploaded files during the active upload window.
The upload page includes a control that deletes private R2 objects for the order and records the deletion event. Payment records are not deleted by that file control.
Backups and logs
Document deletion must include every stored copy.
The 7-year transaction record excludes document contents. Provider backups, temporary copies, and logs must be checked so they do not silently extend the approved document periods. Deletion completion must be recorded.
Implementation gate
Live checkout remains blocked until the controls match these periods.
The periods are approved; lifecycle rules, delivery-date deletion, backup behavior, and deletion evidence still require implementation and testing before customer files are accepted.
Version
Candidate 1.1 — July 22, 2026
Requests and questions may be sent to hello@clearhandreview.com. Do not attach confidential files to email.