Your data and records

Ownership

The office owns its data; Pressroom uses it only to run the service, never to train models or for any purpose of its own.

Exports, any time

Workspace export (settings, templates, articles, issues, with secrets redacted) from Settings → Data export; editorial-history export (every revision, status move, comment, assignment, the HTML of every sent issue, the audit events, and the legal holds, with a manifest of SHA-256 checksums); subscriber CSV with statuses, unsubscribes and consent dates that any Pressroom workspace can import again. The format is documented and versioned.

The public archive

Every sent issue at a permanent public address under your office’s own subdomain, with an RSS feed; the page serves the email exactly as it went out.

Legal hold

An administrator can hold the whole workspace, one issue or one story, with a written reason. Held material is skipped by retention sweeps and cannot be deleted until the hold is lifted.

Deleting a sent issue

Needs a written reason and leaves an audit record; under a hold it is refused.

What we collect about staff and readers

Aggregate usage counts per workspace, per day, per role, kept 90 days; subscriber data as the office imports it; open tracking off by default. The full plain-language list is inside the product at Your account → What we collect.

Leaving

Ask for an export; once the office confirms in writing that it has it, we purge the workspace from the live system and send a receipt. Nothing is deleted before that.

Retention

Retention periods are not yet mapped to any records schedule; the office decides what it must keep, and legal hold and the exports make that possible.