DRAFT — this document is a draft prepared for review and must be reviewed by a qualified legal professional before commercial launch.
Data Retention, Export & Deletion Policy
Retention
Customer data is retained while the organisation account exists. Data is not deleted automatically when a trial or subscription expires.
Export
Administrators can export registers to CSV and download a full organisation export (JSON) from Settings at any time while they can log in.
Deletion requests
Administrators can request account closure and deletion from Settings → Data & privacy. We verify the request, confirm the scope, and complete deletion within [X] days, except where retention is required by law.
Backups
Deleted data may persist in encrypted backups for up to [X] days before being overwritten.
Isolation
Exports and deletions are performed only for the requesting organisation's own records.