docs: data retain policy

Author: tianzhou

content/docs/change-database/rollback-data-changes.md

@@ -7,7 +7,12 @@ feature_name: 'ROLLBACK_DATA_CHANGES'
 
 Bytebase allows taking **Prior Backup** before a data change is made. Bytebase stores the pre-snapshot of the affected rows, which allows you to revert that data change if needed.
 
-## Support Matrix
+<HintBlock type="info">
+
+The backup data is stored in your own database instance. Bytebase does not purge the backup data automatically.
+You can manually delete the data in `bbdataarchive` database/schema.
+
+</HintBlock>
 
 Prior backup is only feasible when meeting **any** of the following conditions:
 
@@ -50,7 +55,7 @@ If the DML change contains more than 5 statements, then all statements will be b
 
 ![bb-prior-bk-single-table](/content/docs/change-database/rollback-data-changes/bb-prior-bk-single-table.webp)
 
-## Project Backup Settings
+## Project backup settings
 
 <PricingPlanBlock feature_name='ISSUE_SETTING' />
 

content/docs/faq.md

@@ -43,6 +43,29 @@ If you use Docker to deploy Bytebase, please use Docker version >= [20.10.24](ht
 
 SQL Editor autocomplete requires [enabling WebSocket](/docs/get-started/self-host/#enable-websocket-for-sql-editor) in your gateway if present.
 
+## Does Bytebase retain your data
+
+Bytebase does not retain any database row data.
+
+### Database credentials
+
+In order to perform database operations on users' behalf, Bytebase needs users to provide the database credentials.
+By default, Bytebase stores the supplied credentials in the obfuscated format. For the Enterprise plan, you can
+instruct Bytebase to [use the external secret manager](/docs/get-started/instance/#use-secret-manager).
+
+### Database schema (metadata)
+
+Bytebase syncs and stores the database schema information. If you enable [AI Assistant](/docs/ai-assistant/),
+Bytebase will also send the schema info to OpenAI or the configured endpoint.
+
+### Database data (row data)
+
+When you query the database via Bytebase, Bytebase does not store the result data. [Audit log](/docs/security/audit-log/)
+only records the query.
+
+If you enable [Data Rollback](/docs/change-database/rollback-data-changes/), Bytebase will store the backup data in your
+own database instance.
+
 ## Production Setup
 
 See [Production Setup](/docs/administration/production-setup/).
@@ -55,12 +78,6 @@ See [Supported Databases](/docs/introduction/supported-databases).
 
 See [Git Provider](/docs/vcs-integration/add-git-provider).
 
-## How Bytebase stores the database credentials
-
-In order to perform database operations on users' behalf, Bytebase needs users to provide the database credentials.
-By default, Bytebase stored the supplied credentials in the obfuscated format. For the Enterprise plan, you can
-instruct Bytebase to [use the external secret manager](/docs/get-started/instance/#use-secret-manager).
-
 ## How to enable https
 
 You can use [Caddy](https://caddyserver.com/docs/quick-starts/reverse-proxy) or [Nginx](https://www.nginx.com/).