Conversation memory for a support agent: what to keep and forget

What a support AI should remember across sessions, what it should forget on request, and why unlimited conversation memory is a privacy liability.