No time limit but both the sender & receiver theoretically have a copy of the data & either can swap them.

The vendor is incentivised to swap them out ASAP.