Live logs contain other people’s messages. Treating them like a private diary for the team is how you get a leak and a policy problem in the same week.
Store what you need for ops and recap. You rarely need full message history for ninety days. You often need gift tables and a short moderation excerpt.
Operators on the current roster only. Shared ZIP files on WeChat are not an access-control system.
When sharing clips or CSVs with sponsors, strip phone numbers, emails, and obvious personal data. Default to handles, not real names.
If a room attracts minors, tighten retention and sharing. “It was in a public chat” is not a complete answer to a parent or a platform.
Have a way to delete a session file. Backups that ignore deletion requests are still copies of the data.