Data Retention & Deletion

Last updated: September 9, 2026

This page explains what data MyImpactAdvisor stores, how long we keep it, and how you can request its deletion. We believe you should have clear visibility into your data and control over it.

1. Types of Data We Store

We store two distinct categories of data, and it is important to understand the difference between them:

User Data (Personal)

This is data that belongs to you and is associated with your account. It includes:

• Account information — Your name and email address, managed through Clerk.
• Generated documents — Your alignment reports, stored as DOCX and other file formats in Cloudflare R2.
• Extracted values & preferences — The structured values profile we extract from your uploaded mission and investment policy documents and that you approve before analysis.
• Analysis sessions — Your portfolio alignment analysis results, including uploaded portfolio files and generated reports.
• Uploaded files — Any documents you upload for analysis, such as portfolio spreadsheets, fund offering documents, or diligence materials.
• Legacy IPS Builder data — If you used the IPS Builder, a conversational tool we retired in July 2026, we still retain the conversation transcripts, preferences, and generated documents (Investment Policy Statements and Advisor Scorecards) it created for you.

This data is yours. You can view it, download it, and delete it as described below.

Platform Research Data (Not Personal)

We maintain a growing database of company and fund profiles to improve the accuracy and coverage of our analysis tools for all users. This platform research data includes risk factors, alignment assessments, fund metadata, industry classifications, and other factual information about companies and investment products.

This data is derived from two sources:

• Public sources — SEC filings (including N-PORT reports), financial disclosures, and other publicly available information.
• Factual insights from user-uploaded documents — When users upload portfolio files, diligence materials, or fund offering documents, we may extract factual, non-personal information about companies and funds (such as fund holdings, risk factors, or investment strategies). This data is about the companies and investment products — not about individual users.

2. How Long We Keep Your Data

The same schedule, in prose, with what the holdings sweep does and does not remove, is on the data-handling page. The two pages state the same periods; if they ever disagree, treat this table as the one to correct against.

3. How to Delete Your Data

Delete Individual Sessions

You can delete individual analysis sessions directly from your Dashboard. When you delete a session, we remove:

• All generated documents (alignment reports) stored in Cloudflare R2.
• Any uploaded files associated with that session.
• All structured data (extracted values, preferences, and analysis results) tied to that session.

The database records are removed permanently, and that cannot be undone. Removing the stored files themselves is a separate step taken immediately afterwards, and it is best-effort: if Cloudflare R2 refuses a delete, we record the failure and the deletion still reports success to you. That can leave an unreferenced copy of a file in storage. Nothing in the product points at it any more: the record that held its location is gone, so the product will not issue anyone a new way to open it. That is not the same as saying it cannot be reached. A download link handed out in the five minutes before you deleted the session points straight at the stored file, and it keeps working until that five minutes is up. We would rather say all of that than claim a guarantee the code does not make.

Full account erasure works the other way round, and deliberately so: there, the stored files are deleted before anything is removed from the database, and if any file cannot be deleted the whole erasure is abandoned and retried on the next run rather than reporting a completion it did not achieve.

Delete Your Entire Account

When your account is deleted in Clerk, the service that manages sign-in, the erasure on our side follows without you asking us for it. It is not instant, and it does not rely on Clerk successfully notifying us: a job on our side runs daily, checks every account we hold against Clerk, and erases the ones Clerk reports as deleted. Starting it needs no email and no ticket from you.

Starting is not the same as finishing, and we will not imply otherwise. That job carries safety checks meant to catch a bad run before it deletes anything — if an unusual number of accounts come back as deleted at once, it stops without erasing any of them and asks for a person to look. When that happens your data stays until someone has. It is a deliberate trade: we would rather defer an erasure than run one we cannot vouch for. If you want confirmation, or your erasure seems not to have happened, email us and we will check it by hand.

If you would rather ask us directly, email us at [email protected] and request full account deletion. We verify your identity and then process the request manually within 30 days. You can also delete individual sessions yourself at any time from your Dashboard, as described above.

When we process a full account deletion, we remove all of your user data listed above — your account record, all analysis sessions, any legacy IPS Builder data, uploaded files, generated documents, and the extracted preferences and analysis results tied to them — from our live systems, including the corresponding files in Cloudflare R2. Platform research data (factual company and fund profiles) is not affected, because it is not associated with your account and is not personal data, as explained above and in our Terms of Service.

4. Third-Party Data Retention

Some of our third-party service providers may retain data independently of our systems, per their own data retention policies:

• Anthropic — Uploaded document content and portfolio data are sent to Anthropic's Claude API for processing. Anthropic's API usage policies state that data sent through their API is not used to train their models. Anthropic may retain API request data for abuse and safety monitoring according to their privacy policy.
• Clerk — Authentication data (name, email, session history) is managed by Clerk and subject to their privacy policy. Deleting your account through Clerk removes your authentication data from their systems.
• Cloudflare R2 — Generated documents and uploaded files are stored in Cloudflare R2. When you delete a session or your account, we delete the corresponding files from R2.
• Google (Gemini API) — Company and fund research queries are sent to Google's Gemini API for processing with Google Search grounding. No user data is included in these queries. Google may retain API request data according to their privacy policy.
• Railway — Our hosting provider may retain server logs that include request metadata (IP addresses, timestamps). These logs are automatically rotated and do not contain the contents of your documents or analyses.

5. Backups

Our database is backed up regularly to protect against data loss. When you delete your data, it is removed from the live database immediately. Backup copies may persist for up to 30 days before they are rotated out. We do not restore deleted data from backups except in the case of catastrophic system failure, and in such cases we would re-apply any deletion requests that were processed during the backup window.

6. Data Portability

You can save the current version of any completed report as a PDF at any time from the report itself: choose Complete · PDF, which opens a print version of the report that your browser’s print dialogue saves as a PDF. If you need a copy of other data associated with your account (holdings data, analysis results), contact us at [email protected] and we will provide an export within 30 days.

7. Contact

For questions about data retention, deletion requests, or data portability, please contact us at [email protected].

For a broader overview of how we handle your information, see our Privacy Policy.