Data Retention and Deletion Policy

Active service and deactivation

Retrakor keeps business, staff, customer, loyalty, check-in, message, and configuration data while needed to provide an active trial or paid service. Cancellation or nonpayment stops access at the provider-recorded cutoff and disables the hosted workspace, QR destinations, check-in and loyalty links, and automated email. It does not immediately erase the account.

Approved interim schedule

• Prospect and unconverted trial records: up to 12 months after the last activity.
• Eligible deactivated account and customer content: available for an authorized export request for 120 days, then deleted or de-identified.
• Resolved, closed, or spam support-ticket content: 180 days before scheduled redaction.
• Security and access logs: up to 12 months unless an incident or legal hold requires longer.
• Marketing consent, withdrawal, complaint, bounce, and suppression evidence: five years after the last relevant event.
• Billing, tax, invoice, refund, and dispute records: seven years, or longer when law requires.
• Audit, fraud, legal-hold, and dispute evidence: for the matter's duration and a reasonable limitation period afterward.

Deletion and export requests

An authorized requester may contact support@notify.retrakor.com. Retrakor verifies identity and authority, confirms the business and scope, preserves required legal or financial records, removes active access, exports eligible data in a reasonable machine-readable format, deletes or de-identifies eligible active-system data, addresses provider copies, and records completion. Retrakor targets a response within 30 days. Customer requests may be routed through the subscribing business when that business controls the data.

Exceptions and suppressions

Deletion does not require Retrakor to remove records needed to complete a transaction, secure the service, detect abuse, comply with law, resolve a dispute, enforce an agreement, or preserve a legal hold. Unsubscribe and suppression records are retained in limited form so deleted or deactivated contacts are not accidentally marketed to again.

Backups and restoration

Deletion from active systems may not immediately remove protected provider backup copies. Backup copies age out under the configured provider lifecycle and are isolated from ordinary use. If a backup is restored, Retrakor must reapply deletion and suppression records before restored information returns to active workflows. Backup availability and restore testing remain operational release controls and are not a promise of customer-level disaster recovery.