Data Collection
Only operationally necessary request metadata should be collected by default.
Tool inputs and outputs may be processed transiently and retained according to configured profiles.
Retention
Upload and generated content should default to temporary storage unless justified otherwise.
Retention windows must be documented and configurable by policy profile.
User Rights
Data access, export, and deletion requests are handled through the Data Requests process.
Jurisdiction-specific requirements need legal review before launch.
Legal Review Notice
This policy requires jurisdiction-specific legal review before production launch and does not constitute legal advice.