Collect less, keep less.

Application analytics use hashed identifiers rather than raw IP addresses. Web-server access and security logs can contain IP addresses for operational purposes. Account sessions expire after 30 days; a new sign-in replaces the previous session. Contact email alone cannot authenticate or recover an account.

Scheduled cleanup removes deduplication identifiers older than 32 days and profile-action aggregates, imported search reports, and provider snapshot history older than 400 days. Moderation, audit, and payment records are kept for operation and dispute handling. Unpublishing a profile does not erase every record.

Approved business facts, images, and hours are public. External business images load from that business website, which can receive your network address. Account data, hashed recovery keys, and performance reports remain private; owners can access only their own business reports.