Draft policy

Data Retention

Recognito should keep event and biometric-related data only as long as needed to run the event, provide attendance records, support users, and meet legal or accounting obligations.

Draft retention targets

Recognition attempts should have short-term operational retention, with a planning target of 30 to 90 days unless the organiser needs longer. Temporary face crops should not be retained by default after processing unless needed for review or debugging.

Deletion

The product should support deletion of attendee records, face enrolments, events, and eventually whole organisations/workspaces.

Exports

Attendance exports are created by users. Once exported, the user or organisation is responsible for handling that downloaded file appropriately.

This is MVP draft wording and not final legal advice.