Updated: 13 October 2026
Data retention
This page describes the current standard retention periods for the public free beta. Expiry ends access; physical cleanup can occur later in a background job or after a failed operation is retried.
Content and account records
Account details, posts, revisions, media, templates, connected chats and publication results are retained for use of your account until the corresponding deletion process. Archiving is reversible and is not erasure. Public-preview and delivery copies may have different lifetimes.
Account deletion
The standard cancellation grace period is 7 days. Postlyra access is revoked when deletion is requested. After the grace period, a worker removes account content and associated private media; failures are retried. A minimal deleted-account record containing the Telegram identifier is then retained for 30 days to prevent accidental account restoration.
Exports
Download access and the private export archive expire after 24 hours. Export request history is normally retained for 30 days. Exports include structured account/content data and media metadata, not raw media files, credentials or signed links.
Beta MCP diagnostics
During beta testing, extended diagnostics may temporarily retain sanitized tool arguments and results, including post text, confirmation text and error details, for up to 7 days. This covers calls sent to Postlyra, not your full AI conversation. Credentials, signed URLs and common contact details are masked; arbitrary text is not guaranteed anonymous. Content traces are accessible only to the service operator, are excluded from ordinary server logs, expire automatically and are then cleared by a background job. Collection is controlled by a temporary switch and expiry date and stops when beta diagnostics is disabled. The guide shows whether it is currently active. Account deletion removes associated traces. Contact support for access or deletion requests.
Events and sessions
Product and security events have a standard 90-day retention period. Sessions expire according to their type and configuration; you can revoke them earlier. Account deletion revokes active access immediately. Technical hosting logs and support correspondence are distinct from these product events and are retained for resolving requests, maintaining security or meeting a legal requirement; contact support about their removal.
OAuth and temporary links
Authorization codes, access tokens, refresh tokens and upload/share links stop working at their individual expiry or revocation. OAuth cleanup ordinarily removes expired or revoked credentials after a 7-day operational retention window and runs when OAuth traffic triggers it. Other expired session or upload records are processed by background cleanup. Expiry of a link does not itself erase the original post or a finalized media asset.
Copies, exceptions and requests
Telegram, AI providers and recipients control their own copies. Technical backups and evidence needed to resolve an incident or comply with law may require separate handling and are not covered by a promise of immediate erasure. Ask support@postlyra.app about a particular record, its retention or deletion. The periods above do not authorize keeping data longer than permitted by applicable law.