Retention principles
Data is retained only for periods required to deliver services, meet legal obligations, enforce rights, and prevent abuse.
Retention schedules are based on data category, legal requirements, security posture, and documented business necessity.
We apply data minimization and regularly review stores to remove or anonymize data no longer required.
Category-level retention
Account profile records are retained for account lifecycle and a limited period after closure for legal and anti-fraud reasons.
Transactional records, invoices, and payment history may be retained for tax, accounting, audit, and dispute requirements.
Security logs and access records are retained for incident response, abuse prevention, and reliability investigations.
Deletion, anonymization, and legal holds
Deletion requests are processed subject to identity verification, legal exceptions, and security controls.
Where full deletion is not possible, data may be restricted, pseudonymized, or irreversibly anonymized.
If litigation, regulatory inquiry, or legal hold applies, certain records may be preserved until obligations are resolved.