Storage, recipients and transfers
Information may be stored by the site’s hosting, account, database, invitation, or other service providers that are necessary to operate the features the publisher makes available. The publisher should document those providers and any relevant locations before publication. Information may also be disclosed where necessary to comply with a lawful request, protect the service, or prevent misuse.
The available generation details do not identify the site operator, hosting provider, account provider, service vendors, storage locations, or international transfer safeguards. No specific recipient, transfer mechanism, retention period, or Google data practice should be inferred from this draft beyond the Google Fonts connection described above.
Information should be kept only for as long as needed for the purpose collected, to maintain an active account or squad plan, to resolve disputes, or to meet applicable legal and security requirements. The publisher must set and publish concrete retention periods for account records, invitations, session content, technical logs and consent records before launch.