Library work, handled online.

• Cataloguing processing requires explicit user consent before a job is prepared.
• Library processing requires an active or trial library license/entitlement before a job is prepared.
• Browser-saved libraries, Drive batches, SSH profiles, credits, and Downloads stay only in this browser until cleared.
• Uploaded source documents, extracted images, manifests, OCR text, QA reports, and generated MARC files should expire from production job storage after 30 days unless the user extends retention.
• Completed Downloads should expire after 90 days unless attached to an active paid project or exported by the user.
• Credit ledger, invoice references, and audit events should be retained for 7 years for financial and operational traceability.
• Public quota keys should use hashed IP/day records and expire after 32 days.
• Users should be able to export work before deletion and request deletion of library profiles, uploaded sources, generated outputs, and saved batches.

Current Controls

• Use the Clear buttons in Libraries, Settings, and Downloads to remove browser-local prototype data.
• Connector secrets are not stored in the public browser prototype.
• Production must add server-side expiry jobs, deletion audit events, backup expiry, and per-organization retention settings before real client data is hosted.