Jul 20 - Update codes to comply with some framework (SOC 2 TYPE 2, ISO, etc)

config.py

@@ -68,6 +68,13 @@ class Config:
     # ── Digest email secret token (used to authenticate cron trigger) ────────
     DIGEST_SECRET        = os.environ.get('DIGEST_SECRET')
 
+    # ── Photo retention (data minimization — GDPR Art. 5(1)(e)) ─────────────
+    # Unset (None) by default: no automatic photo deletion happens unless the
+    # operator opts in. When set, /notifications/purge-old-photos deletes
+    # photo files (not the issue record) for RESOLVED issues older than this
+    # many days.
+    PHOTO_RETENTION_DAYS = int(os.environ['PHOTO_RETENTION_DAYS']) if os.environ.get('PHOTO_RETENTION_DAYS') else None
+
     # ── Google Maps (used for GPS map on inspection view) ────────────────────
     GOOGLE_MAPS_API_KEY  = os.environ.get('GOOGLE_MAPS_API_KEY', '')