---
schema_version: "1"
id: 9e7dbe84ecab67b6abe2d5997482d351a0485061e2f50eae3b2686fb28cd3686
title: Manage How Customer Data Is Retained
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/manage_how_customer_data_is_retained.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.manage_how_customer_data_is_retained.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 83ca2cb65234b78a75b1f5b55af064894e254d5ef261d80bb2e3c2020b5f5b22
description: Under data privacy law, your customers have a right to be forgotten from your org or for data to be restricted from processing. This means that you must delete, archive, or de-identify the data subject’s PII in your org within 30 days of their request. Always work with your legal team to ensure that you collaborate on policy creations and meet requirements set by your company. With Privacy Center, you can obfuscate a customer's PII, move it to storage, or delete it.
products:
  - Security
  - Cross Cloud
release: "264"
---
# Manage How Customer Data Is Retained

Under data privacy law, your customers have a right to be forgotten from your org or for data to be restricted from processing. This means that you must delete, archive, or de-identify the data subject’s PII in your org within 30 days of their request. Always work with your legal team to ensure that you collaborate on policy creations and meet requirements set by your company. With Privacy Center, you can obfuscate a customer's PII, move it to storage, or delete it.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: all editions</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
      <colgroup>
        <col style="width:50%">
        <col style="width:50%">
      </colgroup>
      <thead class="slds-text-title_caps ">
        <tr class="">
          <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d29073e52">User Permissions Needed</th>
        </tr>
      </thead>
      <tbody>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d29073e52 ">To retain customer information using Heroku:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d29073e52 ">ModifyAllData and PrivacyCenter</td>

        </tr>
      </tbody>
    </table>

To obfuscate customer data, Privacy Center can replace your customer’s data with either random characters, known as anonymization, or mock data, known as pseudonymization. Privacy Center can also retain customer data by putting it into storage using Heroku Connect. While this data is retained it can’t be processed or accessed by other users. Privacy Center can completely delete a user’s record and any related information from your Salesforce org. Unlike retained data, these records are permanently deleted after the Recycle Bin clears, either through manual clearance by a user or after the 15-day expiration limit.

- **[Data Retention Policies](https://help.salesforce.com/s/articleView?id=xcloud.data_retention_policies.htm&release=264.0.0&type=5)**  
    Create data retention policies with the Data Retention feature. Using Heroku for data processing and storage, these policies automate how PII is stored, retained, and anonymized in Salesforce.
- **[Create and Customize Retention Policies for Data and Storage](https://help.salesforce.com/s/articleView?id=xcloud.data_retention.htm&release=264.0.0&type=5)**  
    Use the Retention Policies feature to create policies that copy customer data and store it. You can also make PII anonymous in your org and in the data retention store. Or, you can delete data from your org when it copies to the retention store. Choose to anonymize fields or records by replacing them with random characters or mock data.
- **[Run Your Retention Policy](https://help.salesforce.com/s/articleView?id=xcloud.run_your_retention_policy.htm&release=264.0.0&type=5)**  
    Put your policy into practice by executing it. You can only run activated policies, and retention policy executions aren’t reversible.
- **[Heroku Storage: Data Retention Store](https://help.salesforce.com/s/articleView?id=xcloud.heroku_storage__data_retention_store.htm&release=264.0.0&type=5)**  
    Privacy Center uses Heroku as a data retention store. When you choose to retain customer information, it’s placed in Heroku’s storage for safekeeping.