# Data policy

> Choose how Unifuse redacts personal data and how long it keeps conversations and drafts before nightly purges remove them.

Source: https://docs.unifuse.ai/administration/data-policy/

The **Data policy** tab holds the institution's redaction mode and retention windows.

## Before you start

- You need the *manage institution* permission.
- Open **Administration → Data policy**.

## Personal-data redaction

**PII redaction** is **Full** (recommended and the default), **Partial** or **Off**. It controls
how personal data is masked in conversation records and in what is shown to the assistant.

## Retention windows

| Data | Range (days) | Default |
|---|---|---|
| Conversations | 30 to 3650 | 365 |
| Abandoned campaign drafts | 7 to 365 | 30 |
| Advisor Brief drafts | 7 to 365 | 30 |

Purges run nightly. Data past its window is deleted and cannot be recovered.

## What retention does not cover

The audit log is append-only and is never purged. Student and applicant records come from
your institution's systems and are removed by erasure requests, by disconnecting a source, or
when the institution leaves Unifuse. See [Privacy requests](/administration/privacy-requests/)
and [Trust: data handling](/trust/data-handling/).