No one is allowed to store CVN after an authorization attempt. This is why Amazon and Uber don't even ask for it, since they are not allowed to store it
For single use tokens, we store it only until the first authorization attempt. After that it is deleted from our systems immediately, regardless of whether or not the charge was successful.