Only what the project needs
An initial conversation does not require customer datasets, a complete repository or production credentials. Only files needed for the agreed scope are selected at intake. Packaging and secret/personal-data scans reduce risk; they do not guarantee complete cleansing or anonymisation.
Separate data categories
Email enquiries, raw project packages, working copies, reports, contract/invoice records and security logs have different retention reasons. Project-file periods are agreed in the statement of work. New email enquiries are reviewed by the operator for continued need; the previous request system 180-day review date applies only to historical records.
Access and AI tools
Access, permitted tools, model-processing locations and subprocessors are defined before work. Customer code or personal data is not sent to AI tools on the basis of a general publicity permission. A local sandbox does not by itself mean model inputs stay local.
Deletion and exceptions
When the grounds for processing cease, appropriate deletion, destruction or anonymisation is assessed. Limited records required for legal retention or disputes are separated. Clearing an active record does not mean immediate deletion from backups or provider copies; those layers are included in the assessment.
Confidentiality and requests
Confidential project data is not made into a case study, public demo or shared training/evaluation material without separate permission. Retention and deletion questions may be sent to architec1@wwwhelloworldai.com. Final category-specific periods and agreements remain subject to professional confirmation.