Comment by ComradePhil

Support requests can be kept as long as you anonymize them. This is true for everything else. Look up "GDPR anonymyzation".