Under GDPR laws a customer has the right to be forgotten. As a default, Site Flow deletes personally identifiable data (name and first line of address) 12 months after order submission. Shipping data is also anonymized one year after the order is shipped or canceled. If you request your data to be removed before this time it is up to your brand to do this.
You can manually anonymize shipping data prior to the one-year expiration by making an order/anonymize API call https://developers.hp.com/hp-indigo-integration-hub/api/site-flow-api-documentation#Order
Thumbnails are erased 90 days after the order is shipped or canceled.
All other assets (artworks, temporary files, ready files, etc.) are erased after 30 days.
You can learn more about our data retention and security policies by downloading the HP Site Flow Security and Availability White Paper.