Back to the blog
Security & privacy

Deleting a document is only one part of its data lifecycle

Understand the difference between Trash, account deletion, backups, shared copies, and information already sent to an AI provider.

Before treating information as removed, identify the copies and systems involved. A document can exist in a collaborative workspace, its history, a conversation, a backup, a model-provider request, and a colleague's export.

Deleting the document addresses one part of that lifecycle. The other copies may have different rules and different owners.

Trash provides a recovery window

The published Skybits privacy policy describes documents moving to Trash before permanent removal from live systems. This gives users a chance to recover an item moved there by mistake.

For the current window and cleanup rules, consult the published Privacy Policy. If your requirement concerns a specific item type, associated images, or prior file versions, ask how that lifecycle applies to them rather than assuming every resource follows an identical purge path.

A published retention policy does not by itself confirm that a particular item and all associated copies have already been removed. Ask the team for evidence when your workflow requires it.

Backups serve a different purpose

Backups preserve recoverability after operational problems. Information deleted from active systems may remain in retained backups for a limited period.

Ask about the relevant retention policy and how deletion is respected if a backup is restored. Do not interpret an encrypted backup as already deleted, or assume that a declared backup schedule proves a recent restore was tested successfully.

The Privacy Policy describes backups separately from active-system deletion. Ask the team for current operational evidence when recovery forms part of a procurement requirement.

An AI request creates another processing boundary

Information already sent to a model service is governed by the applicable provider arrangement. Deleting the source in Skybits does not inherently recall that earlier request.

Training and retention are separate. A service may exclude content from model training while retaining it temporarily for other purposes. Check the actual account tier and contractual terms.

For a sensitive workflow, ask for the current provider terms before relying on a fixed retention period.

Shared contributions and exports need separate treatment

Collaborative work may include contributions to an item owned by someone else. Closing one account does not necessarily erase those contributions from the collaborators' work.

Exports, downloaded files, and copied text also leave the original service's access boundary. Removing access later limits future access; it does not guarantee deletion from another person's device or another application.

Agree on retention and handling expectations with collaborators before distributing sensitive material. This is especially useful for client projects with a defined closeout process.

Account deletion is a separate request

Moving a document to Trash is not account deletion. Downloading a document is not a complete account-data export.

The published privacy policy describes a manual account-deletion process rather than self-service deletion. Use the current contact route in the public policy, specify the request, and be prepared for identity verification. If a particular shared item matters, identify it clearly.

Ask about the full lifecycle before uploading

For a first workflow, list the item, its recipients, agent connection, model provider, exports, and relevant retention requirements. If the information must be removed on a particular date, verify how each system can meet that requirement before creating avoidable copies.

Next step: Read the current Privacy Policy and check the Skybits Help. Direct specific deletion questions to the team rather than inferring a universal erasure deadline.

Try your first doc now

Start now