How long do we keep OAuth?

Arrow automatically destroys the access token five days after all brand authorized campaigns have ended.