Data
Where data is kept, how long it is kept, and what deletion does.
Two kinds of data
- Your data: whatever you store in your database, and the backups and exports of it.
- Account data: who you are and how you use the service. Names and email addresses, organization membership, database settings, billing and usage records, support requests, and the logs and metrics your database produces.
Where it is kept
| Data | Location |
|---|---|
| Database servers and their disks | The cloud provider and region you chose. Replicas are in the same region. |
| Exports | Object storage in the same region. |
| Disk snapshots on AWS and Azure | The same region. |
| Disk snapshots on Google Cloud | Stored by Google in the multi-region nearest the disk (for example, "US" for a disk in a US region), not in the single region. In your own Google Cloud project they are kept in the disk's region. |
| Account data, including database passwords and certificates | AWS, Frankfurt (eu-central-1), whichever provider and region your database is in. |
| Logs and metrics from your database | AWS, Frankfurt (eu-central-1). |
| Invoices | AWS, Frankfurt (eu-central-1). |
KiviDB does not copy your data to another region. A snapshot or export moves region only if you ask for it to. With Bring Your Own Cloud, your data and its backups stay in your own cloud account.
Whether your database's own log lines can contain values from your data depends on the commands you run. Treat logs as possibly containing key names.
How long it is kept
| Data | Kept for |
|---|---|
| Your database | Until you delete it. A database whose credit has run out is deleted after 7 days. A free-tier database expires after 7 days. |
| Snapshots and exports | Until you delete them, or until the expiry you set on a snapshot. Deleting a database does not delete its snapshots. |
| Database logs and metrics | 30 days. |
| API request logs | 90 days. |
| Availability records | 400 days. |
| Billing and payment records | 8 years, as Indian tax and company law requires. |
| Account records | While the account exists, and up to 3 years after it is closed. |
| Support requests | 3 years after the request is closed. |
What deletion does
| You delete | What happens |
|---|---|
| A database | Its servers, disks, firewall rules and credentials are removed at once. There is no recovery period: take a final snapshot first if you may want the data back. The console offers one. |
| A disk snapshot | Removed from the cloud provider. |
| An export on AWS | Removed from view at once and erased from storage after 7 days. |
| An export on Azure | Recoverable by KiviDB for 7 days, then erased. |
| An export on Google Cloud | Erased at once. |
| Your account or organization | There is no self-service button yet. Write to privacy@kividb.io and KiviDB will delete it, keeping only what the law requires (billing records). |
Logs and metrics already collected from a deleted database are not removed early; they age out after 30 days.
KiviDB's own backups
KiviDB's account database is backed up daily and backups are kept for 7 days. Something deleted from it can therefore persist in a backup for up to 7 days.
Requests from individuals and authorities
- To access, correct or delete personal data KiviDB holds about you, write to privacy@kividb.io. The Privacy Policy sets out your rights.
- If you store other people's personal data in your database, you are the controller of it and KiviDB is your processor. The Data Processing Agreement covers that.
- KiviDB discloses customer data to an authority only when legally required, and will tell the customer first unless the law forbids it.