Two separate stores with different contents, different retention and different controls. Confusing them is the usual source of a wrong answer in a security questionnaire, so they are kept apart here.
1On the NeelAI host, inside your network
| What | Why it is kept | Retention | Who can delete it |
|---|---|---|---|
| Encrypted HANA credentials | To connect at all | Until changed | Customer admin |
| Schema snapshot (table and column names, types, relationships) | So a question can be turned into SQL without reading the database first | Until refreshed | Customer admin |
| Conversation history (questions, answers, the SQL that ran) | So people can return to an answer and an auditor can trace one | Tenant-configured | The person who asked, or an admin |
| Activity log (who signed in, what they asked, what was refused) | Audit | Tenant-configured | Admin only |
2What is not kept
Result rows are not stored. A query runs, the rows are assembled, the answer is sent to the browser, and the rows are gone when the request ends. Reopening an answer from history re-runs the query rather than replaying a saved copy — which is also why an old answer reopened today shows today's figures.
3At the model provider
Under commercial API terms, request and response content is retained for a limited operational window for abuse monitoring, and is not used to train models. A zero-retention agreement removes that window entirely. Consumer chat accounts operate under different terms and are not used by NeelAI at any tier.
What reaches the provider in the first place is covered on What leaves your network, and it is the more important question of the two.
4Setting your own retention
Conversation history and the activity log each take a retention window in tenant settings. They are set separately on purpose: most customers want conversations to age out in weeks and the activity log to survive for years, because the two exist for different reasons.
5Deletion, and what it really means
Deleting a conversation removes the question, the answer text and the SQL. It does not and cannot remove anything from your HANA database, because NeelAI never wrote anything there. Deleting a user account removes that account's history with it, which is why deactivation is the recommended route.
6Backups
The NeelAI host is backed up on whatever schedule your own infrastructure team runs, because it is your host. Deleted conversations therefore survive in your backups until those backups rotate. If a deletion request has to reach backups too, that is a question for your backup policy rather than a NeelAI setting, and we would rather say so than imply otherwise.