Back to SA CoParents
Data Retention

Your data. Your timeline.

Last updated: February 21, 2026

This page explains, in plain English, how long each type of data lives in SA CoParents — and how to get it out or delete it. For the full legal treatment, see our Privacy Policy.

Where it lives
MongoDB Atlas (US-East)
Guest sandbox
1 year
Deletion window
≤ 30 days
Communication preferences
Occasional SA CoParents updates

New features, policy changes, and tips written for co-parents. Transactional emails (share links, receipts, HB 300 notices) will keep coming regardless.

Currently opted OUTHB 300 §181.152 — every change is timestamped in your PHI access log.

Retention schedule

Data typeHow long we keep itWhy
Account (name + email)For as long as your account exists, or until you request deletion.Required to log you in and email your reports.
Prep answers & AI-generated summariesFor as long as your account exists. Historical snapshots retained so we can show 'what's changed since last time.'Longitudinal growth tracking is a core feature.
Assessment scores (Readiness, Special Needs, Safety)Retained per account. Never sold, never used for training.Needed to power your progress charts.
Guest sandbox data (no account)1 year from first activity, then auto-purged.Lets you evaluate the product with zero commitment.
AI Coach chat transcriptsStored in your account. Not sent to Anthropic for training.So you can revisit past coaching threads.
Shareable PDF links (signed tokens)Default 7 days from creation. Parents can pick 1, 7, or 30 days at share time, or 'no expiry' for links they'll revoke manually. Every link is revocable from the dashboard at any moment.Time-boxed so a stale link cannot outlive its usefulness.
Journal entriesFor as long as your account exists.Weekly recaps + longitudinal reflection.
BackupsRolling 30-day encrypted backup. Purged after 30 days.Disaster recovery only.
Server access logs (IP + user-agent)14 days.Security investigations only.
Anonymized usage metricsIndefinitely, aggregated only (no individual can be re-identified).Product analytics.

Deleting your account

You can delete your account and all associated content at any time. Active-account data is purged from our primary database promptly — usually within seconds of tapping Delete. Encrypted rolling backups complete rotation within 30 days, at which point the deletion is total.

Two ways to delete:

Exporting your data

Every generated report is already downloadable as PDF. If you'd like a machine-readable JSON export of your prep answers, journal entries, and assessment scores, email us and we'll deliver it within 7 business days.

Portable formats we support: PDF (reports), JSON (raw data on request), HTML share links (reports).

Your rights

Whether you fall under GDPR (EU), CCPA/CPRA (California), POPIA (South Africa), or another regime, you have the right to:

  • Access — request a copy of the data we hold about you.
  • Rectify — ask us to correct inaccurate data.
  • Delete — request full erasure (as described above).
  • Object — opt out of anonymized analytics processing.
  • Port — receive your data in a machine-readable format.

To exercise any of these rights, contact us at the email below. We do not charge a fee for reasonable requests and respond within 30 days.

Third-party processors

  • Emergent Labs — application hosting and LLM proxy that fronts Anthropic Claude for report generation. The chain is app → Emergent proxy → Anthropic. Emergent's payload retention is not publicly stated; see Emergent's Privacy Policy.
  • Anthropic (Claude Sonnet 4.5) — generates your report content. Anthropic's published commercial API policy is deletion of inputs and outputs within 30 days, subject to exceptions (legal holds, safety/Usage-Policy investigations, feature-specific retention). Anthropic states commercial API traffic is not used to train models unless the customer expressly permits it — we do not permit it.
  • MongoDB Atlas — primary database, US-East region, encryption at rest.
  • Resend — transactional email delivery (magic links, standard PDF-to-professional sends).
  • Virtru Hosted Gateway — HIPAA-scoped joint report + agreement emails, enabled once our BAA and tenant provisioning complete. Currently OFF; standard emails route through Resend in the meantime.
  • Google (optional) — only if you sign in with Google. We receive your name + email, nothing more.

We have not represented Emergent's proxy as covered by a HIPAA Business Associate Agreement, because that chain is not yet contractually confirmed. Please avoid pasting raw clinical records into free-text fields until we publish BAA confirmation.

Contact

Email mattsossi@bsossi.com or call 210-224-1667.

SA CoParents · 16607 Blanco #703, San Antonio, Texas 78232

© 2026 sacoparentsalign.com · All rights reserved.