Vapi stores call logs by default unless

hipaaEnabled=true

, there's no stated retention period, but you can delete logs anytime via the API..