Deleted posts are almost never removed from the database. A PM is removed from the database if the sender and all recipients delete it.

Full database backups are created daily, and all global moderators and admins can download the (encrypted) backups and implement their own rotation policies.