Data retention policy

Last updated: October 8, 2026

Sestaro applies the storage-limitation principle (GDPR art. 5(1)(e)): personal data is kept only as long as necessary. Below is how long each category is retained.

Prospecting data (B2B contacts in the index)

Kept while it serves the service and refreshed at each re-ingestion. Erasable at any time on request (right to erasure) or via opt-out; a removed person is added to a suppression list so they are never re-introduced.

Contacts revealed by a client

Kept in the client's history while their account is active, so they never pay twice. Anonymised if the person exercises their right to erasure.

Account data (name, email)

Until the client deletes their account (right to erasure). After a deletion, only a one-way fingerprint (sha256) of the address and of the Google identifier is kept for 12 months, so that reopening the account does not pay the welcome credits twice.

Admin audit logs

365 days.

Email verification cache

90 days.

Search logs

180 days.

Device fingerprint (anti-abuse)

180 days after the device was last active (any new activity restarts the period); the detailed technical log (IP address, network, component hashes) only 4 days.

Proof of your cookie choices

183 days, the validity of the choice itself. The proof carries neither IP address nor browser identifier.

Messages sent through the contact form

Kept 365 days in our support register to follow up on your request, then deleted automatically. Erasable sooner on request (right to erasure).

Collection journals (public web pages and professional directories)

Log of page fetches: 90 days. Facts read on a page, before they are applied: 180 days. Monthly snapshots of professional directories: 180 days.

Billing data (invoices, payments)

Kept 10 years (accounting and tax record-keeping obligations).

How it is enforced

Automated purges delete data beyond these windows: every week for most categories, every day for the device fingerprint. Billing data and accounts are not touched by these purges.

Remove my data