Retention is study-specific. The same platform record can have different rules depending on the protocol, customer instructions, legal hold, and participant notice.
Records to plan for
Plan retention for:
participant profiles and project participations,
invitation codes and public survey tokens,
survey responses in Formbricks,
delivery attempts, completion records, events, and notifications,
generated exports,
operational logs, Sentry events, and backups.
Deletion review
Before deleting data, confirm whether the record is under legal hold, needed for safety or audit evidence, or controlled by a customer/researcher instruction. Provider-side records may require a separate task in Formbricks, Supabase, Resend, Sentry, logs, or backups.
Practical rule
Keep only what the study needs, document the reason, and remove generated copies such as exports when the approved retention period ends.