# Data Retention Schedule — Visual

> **Document Version:** 1.0  
> **Document Owner:** Acme Inc  
> **Next Review Date:** 2027-03-19


**Organisation:** Acme Inc
**Project:** nextjs-saas-example
**Generated:** 2026-03-19

---

> This document provides a visual Gantt-chart representation of data retention timelines for every service category detected in your project. Use it alongside the [Data Retention Policy](DATA_RETENTION_POLICY.md) for a complete picture.

## Retention Timeline

```mermaid
gantt
    title Data Retention Timelines
    dateFormat YYYY-MM-DD
    axisFormat %Y
    todayMarker off
    section Legend
    Collection date             :milestone, m1, 2026-03-19, 0d
    section Authentication
    Until deletion (~10y cap)    :crit, auth, 2026-03-19, 3650d
    section Database
    Until deletion (~10y cap)    :crit, database, 2026-03-19, 3650d
    section Payment Processing
    7 years    :crit, payment, 2026-03-19, 2555d
    section Email Service
    3 years    :active, email, 2026-03-19, 1095d
    section Analytics
    2 years    :active, analytics, 2026-03-19, 790d
    section Error Monitoring
    90 days    :done, monitoring, 2026-03-19, 90d
    section AI Service
    90 days    :done, ai, 2026-03-19, 90d
```

## Retention Summary

| Category | Retention Period | Days | Risk Level |
|----------|-----------------|------|------------|
| Authentication | Until deletion (~10y cap) | 3650 | High |
| Database | Until deletion (~10y cap) | 3650 | High |
| Payment Processing | 7 years | 2555 | High |
| Email Service | 3 years | 1095 | Moderate |
| Analytics | 2 years | 790 | Moderate |
| Error Monitoring | 90 days | 90 | Low |
| AI Service | 90 days | 90 | Low |

**Default retention override:** 365 days (from configuration).

## Expiry Timeline

```mermaid
timeline
    title When does data expire?
    2036-03-16 : Authentication — Until deletion (~10y cap)
    2036-03-16 : Database — Until deletion (~10y cap)
    2033-03-17 : Payment Processing — 7 years
    2029-03-18 : Email Service — 3 years
    2028-05-17 : Analytics — 2 years
    2026-06-17 : Error Monitoring — 90 days
    2026-06-17 : AI Service — 90 days
```

## Data Lifecycle Phases

```mermaid
flowchart LR
    A[Collection] --> B[Processing]
    B --> C[Storage]
    C --> D{Retention\nPeriod\nExpired?}
    D -->|No| C
    D -->|Yes| E[Anonymise\nor Delete]
    E --> F[Purge\nfrom Backups]
    F --> G[Confirm\nDeletion]
```

Each data category follows this lifecycle. The retention period (shown in the Gantt chart above) governs how long data remains in the **Storage** phase before progressing to deletion.

## Retention Risk Heat Map

| Risk Level | Categories | Recommended Action |
|-----------|------------|-------------------|
| **High** (7+ years) | Authentication, Database, Payment Processing | Verify legal obligation; minimise where possible |
| **Moderate** (1–7 years) | Email Service, Analytics | Review annually; ensure consent is current |
| **Low** (< 1 year) | Error Monitoring, AI Service | Automated purge in place |

## Contact

For questions about data retention schedules:

- **Email:** legal@acme.com
- **Data Protection Officer:** dpo@acme-saas.com

---

*This Data Retention Schedule Visual was generated by [Codepliant](https://github.com/joechensmartz/codepliant) based on automated code analysis. Retention periods are based on regulatory best practices and should be reviewed by your legal and compliance teams.*