Current schedule
| Record | Normal period | End-of-period action |
|---|---|---|
| Active account, saved charts, synastry, preferences, private content and practitioner profile | While the account or feature remains active | Delete, anonymize, or preserve only as described below after a verified request or account closure |
| Private Hellenistic dossiers, saved timeline snapshots, and user-authored reminders | While the account, linked saved chart, or Enhanced continuity feature remains active | Delete when the linked saved chart is deleted or during verified account-deletion fulfillment; exported copies remain under the user’s control |
| Complete natal readings and Urania Speak memory | While the account or retained Speak thread remains active | A confirmed permanent-thread action deletes the selected live Speak thread, messages, packet snapshots, insights, recall metadata and thread events; verified account-deletion fulfillment removes all account-scoped reading and Speak records |
| Verified account-deletion fulfillment | Completed within 30 days after verification | Delete covered data and anonymize/preserve limited public or required records |
| Dashboard AI cache | 7 days | Automatic expiry, except rows deliberately marked as persistent for a user-requested saved feature |
| Usage events, transactional-email records, cron logs, and webhook-failure operational logs | 90 days | Automatic or scheduled deletion/aggregation |
| Processed Stripe event identifiers | 30 days | Delete after replay/idempotency window |
| Administrative audit logs and blog revisions | 365 days | Delete or minimize after accountability/editorial recovery period |
| Billing, donation, refund, tax, invoice, and transaction records | Up to 7 years | Delete or minimize after accounting/legal period |
| Rolling backups | Up to 30 days | Expire by backup rotation; deleted data may remain inaccessible until rotation completes |
| Unverified or expired deletion-request records | 30 days | Sweep the unused request and verification evidence |
| Completed or rejected deletion-request records | 90 days | Sweep the minimized request audit; fulfillment immediately redacts the request email and reason |
| Checkout legal-acceptance evidence | With the related billing or contract record, up to 7 years where needed | Delete or minimize after accounting, contract, dispute, and legal periods |
| Approved first-party product review | While it remains the account’s current approved review | Delete when the author deletes the review or during verified account-deletion fulfillment; editing immediately withdraws the approved version and returns the record to pending |
| Pending or rejected first-party product review | 180 days after the record’s last update | Delete in the scheduled sweep unless an open report requires the record to remain until resolution |
| Administrator-removed first-party product review | 90 days after removal | Delete in the scheduled sweep unless an open report requires the record to remain until resolution |
| Resolved first-party product-review reports and content-free lifecycle events | 365 days after resolution or event creation | Delete in the scheduled sweep; open reports remain until resolved |
Public posts, comments, reviews, and attribution
Public articles and comments may be preserved under “Deleted user” after account deletion unless the author separately requests removal and Moira has no overriding lawful or operational reason to retain them. A user’s first-party Moira product review and its associated reports are deleted when the author deletes that review or during verified account-deletion fulfillment; practitioner profiles and practitioner-specific reviews follow their separate directory rules and may be removed or anonymized. Search engines, feeds, recipients, archives, and screenshots outside Moira may retain independent copies.
Deletion versus anonymization
Deletion removes the operational record. Anonymization removes or replaces account linkage and identifying attribution while retaining material such as a public discussion, aggregate statistic, security indicator, or audit fact. Moira does not describe merely hidden or directly linkable information as anonymous.
Browser-local copies
Browser storage may contain names, birth dates/times, locations, saved chart caches, Workspace settings/session state, onboarding state, astrocartography pins, and Writer Studio recovery drafts. Server-side deletion cannot remotely erase these copies. In the browser settings, clear site data for moira-astro.com on every device/browser you used. Export anything you need first.
Processors and backups
Where required and available, Moira will send deletion or restriction instructions to processors that hold covered service data. Providers may independently retain transaction, fraud, security, abuse, legal, and backup records under their obligations and terms. Moira does not shift the entire processor-erasure burden to you or promise immediate deletion from every backup.
Requesting action
Use the verified account-deletion flow or email hello@moira-astro.com for access, correction, restriction, or a content-removal request. Identity and authority may be verified before action.