Data Retention & Deletion Policy

Effective: 2026-07-01

We keep personal data only as long as necessary for its purpose or as law requires.

| Data | Retention |

|---|---|

| Account & profile | Life of the account + up to 90 days after closure |

| Financial records (invoices, ledger, receipts, tax) | At least 7 years (legal/tax) |

| Outreach messages & consent records | Duration of the relationship; consent proof kept while relied upon + a reasonable period after withdrawal |

| Security / audit logs | Up to 24 months |

| Tracking events (opens/clicks) | Up to 13 months |

| Support communications | Up to 24 months after resolution |

On account closure or a valid erasure request we delete or irreversibly anonymize personal data except where retention is legally required (then we restrict processing until the period lapses). Self-service export and erasure are available in the dashboard.