Who controls data retention?

You do.
Data can be deleted at anytime when no longer needed.