Merchant API Cutover Validator
Data retention and deletion defaults.
Uploaded and pasted source is designed for short retention and can be manually deleted from the report page after scan generation.
Reports, findings, audit events, payment records, and operational logs may be retained longer for report access, fraud prevention, accounting, and service reliability.
P0 live validation does not persist Google OAuth refresh tokens. OAuth validation is optional and separate from source scanning.