We minimize data collection, retain logs only as necessary (30–90 days for verification telemetry), and honor deletion requests. Full policy to be finalized.