Wow, a 5 year retention. That seems so arbitrary and excessive. As someone who has been involved with privacy compliance, this is crazy. Does this apply for European users too? I don't know what the business justification for this would be but I am sure some lawyer could explain this better.