Your inactivity policy is pathetic. I knew my password but was blocked by your 2FA because my phone broke. After months, I finally recovered access today, just to see that you deleted every single important email of mine. Absolutely disgraceful customer service.

Some suggestions to avoid inconveniences like this:

Freeze deletion during recovery: The inactivity timer should be paused if there are failed login attempts related to 2FA or ongoing recovery processes.

Warning system: Send automated warnings to recovery emails or linked phone numbers before permanently wiping data.

Backup options: Provide a way to retrieve data if the user successfully passes verification later.