Data Retention

Our default retention windows:

• Inbound event details (caller, timestamp, decision) — 7 days, or, if the event still has captured content attached (an Inspection body/subject or a voicemail) inside its longer content-retention window, until that content window closes, whichever is later
• Captured message contents (only when Inspection Mode is on), and Voicemail recordings & transcripts (when a screened caller leaves a voicemail) — available for 7 days by default, configurable per carrier (1, 3, 7, 14, or 30 days); access expires at the end of the window, then cleanup runs, though legal holds may delay removal and provider failures can leave stored recording copies
• Quarantined message contents (the encrypted contents of texts or emails blocked as suspected spam, kept so you can review and recover a false positive) — 30 days; this is a separate window that may exceed the content window above
• Repeat-offender abuse signals (the sending phone number or email address of senders your shield blocked, with a count) — retained beyond the 7-day inbound-event window above for fraud and abuse prevention
• Allowlist / blocklist entries — until you remove them, and erased after your shield number is released following cancellation
• Support messages — deleted 365 days after the last message in a closed conversation; stale conversations that remain open or in progress are deleted after 730 days, and an account-erasure request may remove them sooner
• Carrier account, business details + signup attestation — retained with no automatic deletion schedule
• Audit and security logs — admin audit logs are kept for 730 days; carrier audit and system security logs are retained with no automatic deletion schedule

What happens when you cancel

When you cancel, Ironhorse Logic LLC (doing business as Shield Carriers) stops forwarding traffic and schedules your shield number for release after the lifecycle windows on the Terms page; release may require retries, and eligible numbers may be reassigned to our canary pool. Your inbound event details, captured contents, and support history continue to age out on the schedule above, and your allowlist / blocklist are erased once the number is released. We retain your account and business details, signup attestation, billing and referral records, and audit and security logs. A legal hold pauses the account-erasure flow until the hold lifts.

The content window above covers saved message text (Inspection Mode) and voicemail recordings and transcripts. It defaults to 7 days and can be set per carrier to 1, 3, 7, 14, or 30 days in Settings → Privacy. When the window passes, that content is no longer viewable and cleanup runs afterward; legal holds may delay removal, and provider deletion failures can leave stored recording copies.

You can export your data or submit an account-erasure request yourself, any time, from Settings → Privacy — no email required. After the grace period measured from your request, we erase screened messages and calls, safe-sender and blocked lists, support history, and abuse signals. We retain your account and business details, signup attestation, billing and referral records, and audit and security logs. A legal hold pauses this account-erasure flow until the hold lifts. Your sign-in is retained, so signing in later can let you start a fresh paid account. You can still reach us at contact@shieldcarriers.net if you'd prefer we help.