What gets deleted after 90 days
A scheduled job runs every day at 3 AM UTC and deletes records older than 90 days:Calls
Call records, transcripts, summaries, sentiment, extracted data, duration - and the audio recording itself.
SMS messages
Inbound and outbound SMS sent through your agents.
Webhook deliveries
Logs of every webhook payload Nixflex sent to your endpoints.
Outbound campaigns
Campaigns and their recipient lists.
SMS campaigns
SMS broadcast campaigns and recipient lists.
What stays until you delete it
Your account
Login email, name, account creation date.
Agents
Prompts, voice configuration, all agent settings.
Phone numbers
Numbers you have imported, with their carrier credentials.
API keys
Keys you have created for programmatic access.
Audio recordings
Nixflex holds the recording. When a call ends, Nixflex downloads the audio from your carrier, stores it in EU (Ireland) storage, and then deletes the carrier’s copy. The file is removed with the rest of the call record after 90 days.This is what both carriers recommend. Twilio charges for recording storage and documents downloading recordings to avoid those charges. Telnyx keeps recordings for up to a year and advises fetching what you need in good time. Holding the file in the EU also keeps recordings inside the EU for GDPR purposes, rather than wherever your carrier account happens to be.
Where the data is stored
All Nixflex data lives in EU/UK Supabase (Ireland region):- GDPR compliant by default - data does not leave the EU
- UK data residency for UK businesses
- Encrypted at rest (AES-256) and in transit (TLS 1.3)
Manual deletion before 90 days
Delete a phone number
Removes the number from your account.
Delete an agent
Removes the agent and all its configuration.
Delete an SMS campaign
Removes the campaign and its recipient list.
Delete a call
Erases one call record, transcript, and recording file.
Delete all call data
Erases every call, recording, and SMS message on your key.
Call deletion is immediate and irreversible:
DELETE /v1/calls/:id removes the record, the transcript, and the recording file in one request, and DELETE /v1/calls clears everything on your key. There is no recovery window and backups do not restore deleted recordings, so fetch anything you need to keep first. The 90-day cleanup remains the automatic backstop for everything you do not delete yourself.GDPR data subject requests
If one of your end-users asks for their data to be deleted under Article 17:- Find their calls and SMS messages by phone number through the API
- Erase each one with
DELETE /v1/calls/:id- the record, transcript, and recording go together. With the SDK:await client.calls.delete(callId) - Delete any copies you downloaded and stored in your own system
- The 90-day cleanup acts as a backstop - anything missed is deleted automatically
Because Nixflex deletes the carrier’s copy of each recording after downloading it, there is normally nothing left to erase on your Twilio or Telnyx account. Check there anyway if you have your own recording configured directly on the carrier, outside Nixflex.
Roadmap
Coming soon
- Configurable retention windows (30 / 60 / 90 days per agent)
- Per-agent PII redaction in transcripts