Data Retention
How long different categories of data are kept.
This page explains the principles CostGuard applies to keeping and removing data. It publishes no fixed periods. The Privacy Policy is the published statement on retention, and exact handling depends on the data category, the agreement that applies to your account, operational needs, and legal requirements where they apply.
Retention principles
The stated approach is to keep personal information only as long as it is needed for the purposes described in the Privacy Policy, which include service delivery, security, troubleshooting, reporting, legal obligations, accounting, and dispute resolution. Data that is no longer needed for those purposes becomes a candidate for removal.
Operational and account data
Account and workspace data are kept while the workspace is active. Cost records, daily and service-level summaries, recommendation and forecast output, report history, and delivery metadata exist to make the product work and are kept while they serve that purpose. Support messages are kept as part of the support record.
Deletion and backup considerations
CostGuard runs no automated retention, purge, or deletion job today: data collected for a workspace stays until it is removed on request. Where removal does happen, removal from live systems and removal from backups do not happen at the same moment: backups roll off on their own cycle, and copies can persist in a backup set until that cycle completes. This page states no fixed period for either step.
Customer choices and requests
You can disconnect an Azure subscription, deactivate a workspace member's access, or adjust report recipients. Deactivating a member's access retains the record of who once had it, rather than erasing it. Depending on where you are, you may also have rights to access, correct, export, or delete personal information, as described in the Privacy Policy. Use the Contact page to raise a retention or deletion request.
What this page is not
This page states principles, not periods. It sets no retention schedule, promises no deletion deadline, and makes no statement that data is removed from every system or backup at a particular moment. The Privacy Policy and the agreement that applies to your account remain the governing documents.