Data retention and deletion
This page says what Artemii stores, for how long, and what happens when you delete something. It supports the Privacy Policy.
In short
- Your content (chats, messages, artifacts, files, memory, projects and settings) is kept until you delete it. It does not expire by itself.
- Incognito chats are deleted when you leave or delete them, and in any case within 24 hours of being created.
- Pictures you make are deleted after 30 days by default (incognito pictures within 24 hours).
- Tool approval records and deep research run records are deleted after 7 days. The activity log is kept 90 days. The administrator audit log is kept 400 days.
- "Delete all my data" removes your content, memory, connections, permissions, activity and shares, and keeps a few records listed below.
- Nothing is ever deleted automatically because your storage is full.
What is stored and for how long
| Data | Kept for | Notes |
|---|---|---|
| Account facts from Mayfair ID (identifier, name, email, plan, limits, first and last seen) | While the account exists. Not removed by "Delete all my data". | Used for your allowance and, on business plans, the administrator people list. No fixed period for removal after a Mayfair ID account is closed has been set yet. |
| Settings | Until deleted | Removed by delete-all. |
| Chats and messages | Until you delete the chat (or delete-all) | Messages include their text and details of tools and sources used. |
| Artifacts and every version | Until the chat or artifact is deleted | Up to 400 KB each. |
| Uploaded files and their search index | Until you delete the file, its chat or project | The search index is derived data and goes with the file. |
| Projects and their instructions | Until deleted | |
| Memory | Until you delete it | Up to 200 notes. Written by you, by Artemii, by automatic learning or by a Mayfair app you allow. Sensitive categories are refused when saving. Includes optional search vectors. |
| Company knowledge (written by administrators) | Until an administrator deletes it | Belongs to the organisation, not to one person. |
| Custom assistants | Until deleted | |
| Share links | Until revoked or deleted | Incognito chats cannot be shared. Anyone with the link can read what was shared until you revoke it. |
| Thumbs up and down, with optional reason | Until the chat is deleted (or delete-all) | |
| Anonymous daily feedback counts per model | Kept | No user identifier and no content. No fixed period has been set. |
| Generated pictures | 30 days by default; incognito pictures 24 hours | Stored privately. The prompt is not stored with the picture. Deleted with their chat. |
| Picture request counts (daily cap) | Counts only, no content | Rows older than today are removed by delete-all. No fixed purge period has been set. |
| Connected services (encrypted tokens and non-secret details) | Until you disconnect or delete-all | Disconnecting asks the service to revoke the token, as far as it can. |
| Connection sign-in in progress | 10 minutes | Removed when used or expired. |
| Permissions | Until changed or deleted | |
| Activity log (tools, apps and connections used; secrets removed) | 90 days | Shown to you in Settings. Incognito chats write none. |
| Tool approval records | 7 days, or delete-all | Include the arguments you were asked to approve. |
| Deep research run records | 7 days, or delete-all | Today's rows stay as daily-cap counters. |
| Usage records (when, size, chat identifier) | Kept after deletion | So allowances and billing stay accurate. No fixed period has been set. The chat identifier of a deleted chat can remain in the record. |
| Storage totals | Reset to zero by delete-all | Counts only. |
| Abuse-protection record (warnings, any pause, counters and a salted one-way hash of your network address) | Kept after deletion. No fixed period has been set. | No message text is kept. Short-lived rate-limit counters are purged after 2 hours. |
| Direct mode acceptance (time, terms version, optional salted hash of your network address, withdrawal time) | Until you delete everything | Withdrawing records the time; delete-all removes the row. |
| Anonymous safety and Direct mode counters | Kept | No user identifier and no content. |
| Administrator audit log | 400 days | Records administrators' actions, not users' content. |
| Developer API usage per key and day, with an optional end-user label | No fixed period has been set | Counts only. The per-end-user totals are not tied to an Artemii account and are not removed by delete-all. |
| Developer API request text | Not stored | The API is stateless and request text is not logged. |
| Incognito chat content | At most 24 hours | Never counted against storage, never shared, never used for memory. At most 20 open incognito chats and 20 MB. |
| Preview and picture links | 10 minutes and 5 minutes | Signed links, not stored. |
| Sign-in token | Until the tab or browser closes, or you sign out | Held in the browser only, not stored by the gateway. |
| Server logs | A short period | Events and error messages, not message text, prompts or tokens. |
Counters and bookkeeping that hold no content are listed because they are still personal data when tied to an account identifier.
Incognito chats
- Content is kept on the server only for the life of the chat, because streaming, artifacts and previews need it.
- Not listed in history or search, not exported, not shared, no memory read or written, no activity log entries, and no connectors or app tools unless you switch them on for incognito.
- Deleted when you delete the chat, with "delete all incognito chats", or at most 24 hours after creation. Pictures made in them are removed first.
Export
Settings has a download that gives you one file with: your profile fields, settings, projects, chats with messages, artifacts with all versions, files, memory, connections (public details only), permissions, your latest 500 activity entries, custom assistants and share links. Memory can also be exported on its own.
The export does not include incognito chats, the generated picture files (download those one by one in the app), feedback ratings, your Direct mode acceptance record, usage records or abuse-protection records. Email hello@mayfairmail.com if you want a copy of anything the export leaves out.
What "Delete all my data" does
Removes: generated pictures; connections (each service is asked to revoke access, then the records are deleted); custom assistants, their chat links and feedback; Direct mode acceptance; memory and its bookkeeping; permissions; the activity log; sign-in-in-progress records; approval records; research run and picture request records older than today; artifact versions, artifacts, messages, chats, incognito markers, files, projects, share links and settings. Your storage total is then reset to zero.
Keeps:
- your people record (identifier, name, email, plan, limits, first and last seen);
- usage records (counts, with a chat identifier), so allowances and billing stay accurate;
- today's cap counters (research and picture counts that enforce daily caps; they hold no content);
- your abuse-protection record, including the salted one-way hash of your network address;
- developer API per-end-user usage totals;
- anonymous counters (safety, feedback and API totals) with no user identifier and no content;
- any picture whose storage delete failed, until the next clean-up removes it.
Not covered: copies that others hold. A connected service keeps what Artemii sent it, a person you shared a link with may have copied it, and backup copies are not yet covered on this page. Deleting your Mayfair ID account is a separate action in Mayfair ID.
Deleting single items
| Action | Effect |
|---|---|
| Delete a chat | Removes its messages, artifacts and versions, attached files, share links, assistant link, feedback ratings and generated pictures. |
| Delete a file | Removes the file and its search index. |
| Delete a picture | Removes the stored picture and its record. |
| Delete a memory, or all memory | Works even when storage is full. |
| Revoke a share link | The link stops working. Preview links already issued last at most 10 minutes. |
| Disconnect a service | Deletes the stored tokens and asks the service to revoke them, as far as it can. |
| Revoke everything | Disconnects every service, cancels pending approvals and sets every permission to off. Memory is kept unless you also choose to forget it. |
Storage and what happens when it is full
When pooled storage is enabled for your account, Artemii storage counts against your Mayfair account storage allowance. The allowance is pooled: it is one allowance shared across your Mayfair apps (Mail, Drive, Apps, Chat, Cloud and Artemii), so what Artemii stores sits alongside the rest. A free Mayfair account has 5 GB across the whole account. Where pooled storage is not enabled, only Artemii's own storage is counted.
- Artemii counts messages, artifact versions, files, memory, generated pictures, search-index data, cached connector tool lists, projects and assistants.
- Warnings appear at 80, 90, 95 and 100 percent, at most once per level per day.
- When the allowance is full, new messages, new chats, uploads, picture generation, new artifact versions and new memories are refused. Reading, downloading, exporting and deleting always work. A reply that is already running finishes.
- Nothing is deleted automatically.
- If Artemii cannot read your storage total, it pauses new saves rather than risk going over. Reading, export and deletion still work.
- There are also caps on rows: 5,000 chats, 200 projects and 2,000 files per person. Incognito content is not counted but is bounded.
Questions: hello@mayfairmail.com.