Deletion of expired credit cards or deletion by a selected date

There is a potential security issue that was brought up by my insurance advisor --

nopCommerce retains credit card data, even expired cards forever. This places a security burden on my company.

1) Is there a way to delete the credit card data for all expired cards on every order in the system?
2) Is there a way to delete the credit card data for all orders with a fixed date (example: 90 days from the date of original sale)?

Hi there,
For 1) I can give you SQL query to accomplish that, but don't sure whether you have DB access or not and could you execute that?
For 2) I think you have to build/develop a simple plugin which will do it via a schedule task.

Thanks for responding. I have full db access as administrator.