A project stores sensitive conversations longer than the organization's policy allows. What should be reviewed?

1. Only generation temperature
2. Response and conversation retention settings plus separately retained data
3. Only the model's public name
4. Only output formatting rules