About privacy-and-data-retention-review
A privacy and data-retention review skill for product teams. It maps data handling across the lifecycle and produces risks, a retention schedule, and product changes, while avoiding unsupported compliance claims.
Key features
- 01Map data categories and purposes
- 02Review collection through deletion
- 03Compare behavior with privacy disclosures
- 04Produce risks and retention schedule
Use cases
- 01Review a product’s data lifecycle
- 02Identify gaps in privacy disclosures
- 03Plan data-retention changes
Install
Copy the command and run it in a terminal.
$
npx skills add https:/ / github.com/ sylphxai/ skills --skill privacy-and-data-retention-reviewAfter installing, type/privacy-and-data-retention-reviewin Claude Code to confirm it loaded.
Bundled filesagents/openai.yamlreferences/privacy-data-retention-patterns.md
Details
From the project READMEPrivacy And Data Retention Review
Use this skill to make data behavior intentional, explainable, and supportable.
Workflow
- Identify data categories, users, jurisdictions/channels, processing purposes, and storage systems.
- Read
references/privacy-data-retention-patterns.md. - Map collection, use, sharing, retention, deletion, export, backup, telemetry, and support access.
- Compare product behavior with user-facing privacy/store disclosures.
- Produce risks, retention schedule, and product changes.
When not to use
- Do not use for generic advice the base model already handles without this skill's specific artifact contract.
Guardrails
- This is product/privacy design support, not legal advice.
- Do not invent compliance claims.
- Minimize data by purpose; do not collect because it might be useful someday.
Output format
Data surface:
Data categories:
Lifecycle map:
- Collect:
- Use:
- Store:
- Share:
- Retain:
- Delete/export:
Risks and fixes:
- <rule id> <risk> -> <fix>
Comments
Markdown supported