# yasync retention addendum

Version: 2026-11-03-retention. Provider: remoteroom GmbH.

This addendum supplements the customer data processing agreement (AVV/DPA),
version 2026-10-25-netcup, specifically Annex 1's rows on transfer lifetimes and
incoming request-link packages. It forms part of the current Terms when those
Terms are expressly accepted. Publication alone does not accept amended Terms
for an existing customer. The underlying DPA and its historic downloadable PDF
remain unchanged as a record of the agreement offered at that time.

## New transfers and received packages

Free links default to one day and can last up to fourteen days. Plus links
default to three days and can last up to fourteen days. Pro links default to
three days and can last up to sixty days. A permitted expiry edit starts the
selected interval from that edit, within the account's current plan limit.

A request-link configuration may remain open for future submissions. Each newly
completed received package has its own expiry: three days from completion.
For a watched upload, that period starts when the watch session closes, whether
explicitly or following its configured connection-loss grace. Guest-supplied
expiry values cannot lengthen this receiving-account retention policy. An active
watch session remains open while it is maintained; it is not a closed package.

These finite lifetimes qualify the older Annex 1 statement that incoming
packages have no automatic expiry. They apply prospectively when new packages
are completed under the displayed retention setting. Existing customers'
expiry/deletion settings remain documented instructions under DPA section 2.1;
a favorable price change does not itself accept this addendum or revised Terms.

## Existing published packages and deletion

This addendum does not retroactively change a saved expiry or delete an existing
published package, including a legacy package without an expiry. Existing
instructions, a later permitted expiry edit, owner deletion, legal restrictions
and the previously agreed paid-plan termination rules continue to apply.

Download files before their expiry; account-record export is not a file-payload
backup. At expiry, access is removed and the existing cleanup/recovery policy
applies: twelve hours for ordinary Free expiry, twenty-four hours for paid
expiry or sender deletion before permanent purge is eligible. Cleanup sweeps,
retries and provider outages can delay completion; recovery is not guaranteed.
Customer file payloads are not backed up. Any necessary legal preservation and
restricted database records remain governed by the existing DPA and Privacy
Notice and do not extend download availability.

All other DPA duties, safeguards, subprocessors and data-subject protections
remain unchanged. Questions or documented instructions:
yasync@remoteroom.io. Current Terms: https://yasync.com/terms.
Privacy Notice: https://yasync.com/privacy. DPA: https://yasync.com/dpa.