This Studio is restricted to the founder. Sign-in uses Microsoft Entra. We record account identifiers and configuration actions to authorize access and identify who changed each version.
The policy sets a 12-month action-audit retention period, reviewed every 90 days. The next review is December 8, 2026.
Data, session and deletion
The profile and authentication tokens stay in server memory during the session, limited to 8 hours or 30 minutes of inactivity. Essential cookies store random sign-in and session references, not these tokens.
The application persists Microsoft directory and account identifiers (tid and oid), action, time, version and outcome. The audit record does not receive the complete account profile.
Automatic deletion is not available yet. Before the first expiry, reviewed administrative deletion will preserve dependencies required for configuration, rollback and duplicate-command prevention. Retention exceptions will be documented.
Microsoft records and backups follow their own lifecycles. This Studio policy does not change customer-data processing or authorize messaging. Learn more in the Privacy Policy.