Data Retention Policy

Last updated: May 16, 2026

We retain as little data as we need to run the Service. This page documents exactly what we keep and for how long.

In-progress estimate drafts

Where
Your browser's localStorage under riptide.estimate.draft.
Sent to server?
Not until you click Save to history or Generate with AI.
Retention
Until you clear your browser data, click New estimate, or our origin's storage quota evicts it.

AI-generated scope (Generate with AI)

Transit
Spec JSON + any attached Roof Diagnose damage report sent over TLS to Anthropic's API.
Server retention
Not persisted on Riptide servers unless you click Save to history. Anthropic's retention follows their published API policy (not used to train their models).

Saved estimates (Save to history)

What we store
Full spec JSON + rendered PDF. Keyed by Stripe customer id + timestamp.
Where
Vercel Blob (US-based object storage, encrypted-at-rest, TLS in transit).
Retention
365 days. After that the spec + PDF are automatically deleted by a weekly cron sweep. Your Stripe-metadata audit row (date / address / total) stays as long as your subscription is active.
Manual delete
From /estimates, click Delete on any row.

Audit log (Stripe customer metadata)

What we store
Compact JSON list: per-estimate timestamp, line count, address (truncated), total dollars.
Where
Stripe customer.metadata. Lives on your Stripe customer record, capped at 30 most-recent entries.
Retention
Indefinite while your subscription is active. Deleted when you cancel + close your Stripe account.

Usage counters

What
Per-month estimate count for quota enforcement.
Where
Stripe customer.metadata under estimates_used_YYYY_MM keys. We prune keys older than 12 months.

Server logs

What we log
Timestamp, IP address, user agent, response status, request duration, error messages. We do NOT log estimate content or PDFs.
Retention
Up to 30 days for security, abuse detection, and debugging.
Where
Vercel platform logs (US-based).

Deletion requests

Self-serve deletion is available from /estimates. For other deletion requests (audit log, server logs tied to your IP, etc.) email hello@riptideai.co. We respond within 30 days.