Skip to main content
Short answer: Your data lives primarily on servers in France and Germany. We keep personal data only as long as needed for the service (generally while your account is active). When you delete your account or when we no longer have a legitimate need, we delete or anonymize the data. If something sits in backups, it’s securely isolated until it can be removed.
See also: How ShortPen protects your data (GDPR and Data Privacy)

​
Data location

  • Primary hosting ShortPen runs on infrastructure located in France and Germany.
  • Processors outside your country Some processing by trusted providers can occur in other countries (e.g., the United States). These transfers use EU Standard Contractual Clauses and similar safeguards.

​
What we keep and for how long

  • While your account is active We keep personal information only as long as necessary to provide the service. No purpose requires keeping it longer than your account lifetime.
  • If there is no ongoing business need We delete or anonymize your data. If immediate deletion isn’t possible (e.g., backup archives), we securely store and isolate it until deletion is possible.
  • Analytics & link data Available for as long as the account is active. Deletion removes them.

​
Deletion timelines (what happens when you delete your account)

  1. You request deletion from your account settings.
  2. We deactivate or delete your account and remove info from active databases.
  3. Limited retention may remain only where required (e.g., fraud prevention, legal/accounting), or in backups (isolated from further processing) until safe deletion is possible.

​
International transfers & safeguards

If data must move outside the EEA/UK/Switzerland (for example, to the United States), ShortPen applies Standard Contractual Clauses and other appropriate measures so your data is protected to European standards.