Account

Privacy & data retention

Control how long Quincer keeps personal data, and respond to data‑subject requests — export or delete everything Quincer holds about one person. Settings live under Settings → Privacy.

Set data retention

By default Quincer keeps data until you delete it. You can turn on an automatic deletion window per data type — Quincer then deletes anything older than that window once a day, and removes the matching files (recordings, attachments) from storage too.

Open Settings → Privacy.
For each data type, choose Keep forever or a window (e.g. Delete after 90 days).
Save. The daily sweep starts applying your windows automatically.

Windows are opt‑in: anything left on Keep forever is never auto‑deleted, so turning on retention won't unexpectedly remove data you still need (for example, captured leads).

What you can set a window on

Visitor memory — a returning visitor's remembered profile, deleted after a period of inactivity.
Chat conversations & transcripts — message content and attachments.
Voice calls & transcripts — voice session records and transcripts.
Voicemail recordings — audio and transcriptions (a short window is recommended).
Leads — captured contact details (often kept for the sales relationship — choose deliberately).
Survey responses — CSAT and survey submissions.
Inbox email — messages ingested by the email‑inbox automation.

Visitor memory

When visitor memory is on, enabling “automatic deletion of inactive visitor memory” removes both a visitor's learned profile and their identity record after the chosen period with no activity — not just individual remembered facts.

Export or delete one person's data

To handle a data‑subject request (right of access / right to be forgotten), use the Data subject requests tool in Settings → Privacy. It works across all stores — memory, leads, conversations, voice, voicemail, surveys, and inbox email.

Enter the person's email, phone number, or visitor ID.
Look up to see how much data matches, by type.
Export downloads everything held about them as a JSON file.
Erase permanently deletes everything held about them. This can't be undone.

Every retention deletion and data‑subject request is written to an append‑only audit log (counts, type, and timestamp) for your compliance records.

You can show visitors a short consent notice when memory or recording is active — enable it and set the wording under Settings → Privacy → Consent notice.

A note on compliance

These controls — configurable retention, deletion on request, export, consent, and an audit trail — are the building blocks for GDPR, PIPEDA, and SOC 2 programs. They don't by themselves constitute certification; pair them with your organization's written retention policy and data‑processing agreement.