Executive Blake Williams told a regulatory hearing that the company has mechanisms to automatically delete certain data in cycles of no more than 90 days.