Last Updated: May 25, 2026

Data Retention & Deletion

This page explains how long BESTcyberIQ retains your data, what happens when you delete your account, and how to request export or deletion.

What we retain and for how long

Data typeRetention period
Account and profile dataRetained while account is active
Assessment responses and scoresLife of account — drives score history and benchmarks
Audit and activity logs30 days (Free/Report) · 90 days (Pro) · 1 year (Team/Enterprise)
PDF reportsLife of account or 1 year from Report tier purchase
Support/feedback messagesUp to 2 years
Payment recordsAs required by law (typically 7 years)
Database backupsPer Supabase backup rotation; may persist briefly after deletion

Extended log retention

Team and Enterprise customers can extend audit log retention to 3 years with the Log Retention add-on ($50/month or $5,000/year).

Account deletion

When you delete your account:

  1. Your account is immediately deactivated and you are signed out.
  2. All personal data (profile, assessments, company data, reports) is permanently deleted within 30 days.
  3. You may email william@bestcyberiq.com within those 30 days to request restoration.
  4. After 30 days, deletion is permanent and cannot be reversed.
  5. Anonymized, aggregated data (e.g., industry benchmark averages) may be retained.

Organization deletion

When a company workspace is deleted, all associated assessments, members, reports, and activity logs are deleted along with it within 30 days.

Export your data

To request a copy of your data, email william@bestcyberiq.com with "Data Export Request" in the subject line. We will respond within 30 days.

Deletion requests

To request deletion outside of in-app account deletion, email william@bestcyberiq.com with "Data Deletion Request" in the subject line.

Contact: william@bestcyberiq.com · BESTulaba LLC · Natick, MA 01760

Also read our Privacy Policy

Feedback