Data Retention Schedule
We retain personal data only for as long as necessary for the purposes described in our Privacy Policy, or as required by applicable law.
Retention Periods
| Data type | Product(s) | Retention period | Deletion method |
|---|---|---|---|
| User account data (name, email, password hash) | All | Duration of account + 30 days after deletion request | Anonymization |
| Traffic and access logs | All | 12 months | Automated purge |
| Authentication logs (login attempts, OTP events) | Auth | 90 days | Automated purge |
| Session refresh tokens | Auth | 7 days from issuance | Automatic expiry |
| Invoice and billing records | Invoice Generator | 7 years (tax law requirement) | Hard-deleted after mandatory period |
| Expense records and receipt images | Expense Tracker | 7 years (tax law requirement) | Hard-deleted after mandatory period |
| Employee records (profile, time entries, leave) | HR Manager | 7 years (employment law requirement) | Hard-deleted after mandatory period |
| Appointment/booking records | Appointment Scheduler | 2 years | Soft-delete then automated hard-delete |
| Form submissions | Form Builder | 90 days (configurable by form owner) | Automated hard-delete |
| CRM contact data | CRM | Active relationship + 3 years | Pseudonymization on delete request |
| Email campaign events (opens, clicks, bounces) | Email Campaigns | 90 days | Automated purge |
| Email subscriber records | Email Campaigns | Active: indefinite; Unsubscribed: 30 days | Hard-delete after 30 days post-unsubscribe |
| Uploaded documents and files | Document Store | Duration of account + 90 days after soft-delete | Hard-delete from Cloudflare R2 |
| Resume and job preference data | Vritti | 2 years from last activity | Soft-delete then automated hard-delete |
| Website content and pages | Website Generator | Duration of account + 30 days | Hard-delete |
| Order and customer data | E-commerce Store Builder | 3 years (dispute resolution period) | Anonymization of customer PII after period |
| Consent records (timestamp, policy version) | All | Duration of account + 7 years | Retained as legal evidence of consent |
How to Request Early Deletion
To request deletion of your data before the end of a retention period, use the account deletion feature in your account settings or email legal@vin-g.com. Note that data required by law (financial records, employment records) cannot be deleted before the mandatory retention period expires.