The traffic data, or CDRs, for SMS messages is stored for 10 years. We store this information for tax compliance purposes.
The SMS content, or messages sent and received, is stored as specified by the project owner or Twilio customer. Customers can choose to delete message bodies any time via an HTTP DELETE request. Once the request is received, it is removed from the customer facing repository that holds messages.
Message bodies may persist up to 30 days in database backups. Twilio backs up its data bases in order to be able to recover from service failure. These backups are deleted every thirty days.