# Where is my data stored, and for how long?

> Your data is stored on Google Cloud in the United States, and every connection to DemoPage is encrypted with TLS. Your account and demo recordings are kept while your account is active and deleted when you ask; other records are removed on a schedule, and backups roll off within 30 days. Nothing you or your visitors send is used to train AI models.

Reviewed 2026-10-27.

## How long each record is kept

- Account data: while your account is active, and deleted when you ask.
- Demo sessions and recordings: while your account is active, up to the latest 1,000 sessions across DemoPage plus each link's 20 latest and the recording it shows, and deleted when you ask.
- Leads and questions: each demo link keeps its latest 200 leads and 60 questions.
- Recap links stop working after 30 days, and recording links when they expire, after 1 to 90 days.
- Mail sent to a DemoPage login's address: 14 days.
- A saved signed-in session to your sandbox: 24 hours.
- Visit counts used for limits: 7 days.
- A connected AI tool: it ends after 30 days without use, or at once when you disconnect it or reset your password.
- Backups: hourly database backups for 30 days, and disk snapshots for 14 days.

The [Privacy Policy](https://demopage.io/privacy.md#retention) has the full list.

## Who processes it

Google Cloud hosts DemoPage and its backups in the United States. Anthropic, OpenAI, PyAI, and TypeSafe run the AI features, and Resend delivers email. Slack gets alerts only if you connect it, and tools you connect, such as a webhook or an AI tool, get what you send them. For the current list, email legal@demopage.io.

## Your visitors' data

- Their questions are kept as text. Voice clips are transcribed and then discarded.
- Limits count visitors by a salted hash of their network address; the address itself isn't stored.
- Demo pages set no cookies, and DemoPage uses no advertising cookies or third-party analytics.
- When a visitor asks what you hold, see [What to do when a visitor asks for their data](https://demopage.io/help/visitor-privacy-request.md).

## Moving data out of Europe

Personal data from the EEA, the UK, and Switzerland moves to the United States under the European Commission's Standard Contractual Clauses, with the UK Addendum for the UK. Our EU representative under Article 27 of the GDPR is IT Governance Europe Limited, at eurep@itgovernance.eu. Hosting outside the United States isn't available yet. [SSO, audit export, and data residency](https://demopage.io/help/does-demopage-support-sso.md)

## Data to keep out of a demo

Protected health information, payment card data, and government ID numbers. Use a sandbox with sample data instead.

Step by step: [Privacy Policy: data retention](https://demopage.io/privacy.md#retention).

## Related questions

- [How do I delete my data or get a Data Processing Addendum?](https://demopage.io/help/delete-my-data.md)
- [What do I do when a visitor asks to see or delete their data?](https://demopage.io/help/visitor-privacy-request.md)
- [Is it safe to let DemoPage demo my product?](https://demopage.io/help/is-demopage-safe.md)
- [Does DemoPage support SSO, audit export, or data residency outside the US?](https://demopage.io/help/does-demopage-support-sso.md)

Still stuck? Email hello@demopage.io. All questions: [Help center](https://demopage.io/help.md).