Data retention & deletion

How long sessions stick around, what happens when they expire, and how to delete data on demand.

Retention by plan

• Free, 30 days
• Starter, 90 days
• Growth, 180 days
• Agency, 180 days
• Enterprise, 365+ days, custom under contract

Sessions older than your retention window are deleted from primary storage. Aggregated metrics (KPIs, daily counts) are retained longer so historical charts stay populated even after underlying replays are gone.

What gets deleted

• The session row itself and all of its rrweb event rows.
• Any associated share links, they 404 after deletion.
• Notes attached to the session.

What does not get deleted: the visitor record (anonymous ID), since the same visitor may have unexpired sessions elsewhere, and the aggregated daily metrics derived from the session at ingest time.

Deletion on request

End users can request deletion of recordings associated with their visit. The Replayful customer (you) handles the request: look up the visitor ID, find their sessions, and delete them from the project. We'll automate this in a future release.

Workspace deletion

Deleting a project removes all of its sessions immediately. Deleting a workspace (contact support) removes every project and session under it. Both operations are non-recoverable.

Backup posture

We take encrypted daily backups for our own disaster-recovery needs. Backups are retained for 7 days and are not user-facing (you can't restore individual sessions from them).