Data Retention Policy
Detailed information about how long we retain your data and when it is deleted.
This Data Retention Policy explains how long BrandOps ("we", "our", or "us") retains your personal data and when it is deleted. This policy should be read in conjunction with our Privacy Policy and complies with GDPR and other applicable data protection laws.
1. General Retention Principles
1.1 Purpose-Based Retention
We retain your data only for as long as necessary to:
- Provide our Service to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Protect our legal rights and interests
1.2 Retention Periods
Different types of data are retained for different periods based on their purpose and legal requirements. See the table below for specific retention periods for each data type.
2. Data Retention Periods
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Information | Duration of account + 30 days | Service provision and account recovery |
| Content Data (Posts, Ideas, Templates) | Duration of account + 90 days | Service provision and user recovery |
| OAuth Tokens (Encrypted) | Until account deletion or disconnect | Platform integration functionality |
| Analytics & Metrics | Duration of account + 1 year | Historical analytics and reporting |
| Session Data | Session duration + 7 days | Authentication and security |
| Logs & Audit Trails | 90 days | Security monitoring and troubleshooting |
3. Active Account Retention
3.1 During Active Use
While your account is active, we retain all data necessary to provide the Service, including:
- Account information and preferences
- All content you create (posts, ideas, templates, brands)
- Platform connections and OAuth tokens
- Analytics and engagement metrics
4. Account Deletion
4.1 Deletion Request
You may request deletion of your account and associated data at any time. When you request account deletion:
- Processing Time: Account deletion is typically processed within 30 days of your request
- Data Deletion: Most data is permanently deleted within the retention period after account closure
- Legal Retention: Some data may be retained longer if required by law (see Section 5)
4.2 Data Export Before Deletion
Before deleting your account, we recommend exporting your data. You can export your content and data through the Service's export features. Once your account is deleted, we cannot recover your data.
5. Legal Retention Requirements
5. Extended Retention
We may retain certain data longer than the standard retention period when:
- •Legal Obligations: Required by law, regulation, or court order
- •Dispute Resolution: Data is relevant to ongoing legal proceedings or disputes
- •Fraud Prevention: Necessary to prevent, detect, or investigate fraud or abuse
- •Tax Records: Financial records may be retained as required by tax laws (typically 7 years)
6. Backup Retention
6.1 Backup Deletion
Encrypted backups of our databases are retained for disaster recovery purposes:
- Retention: Backups are typically retained for 30-90 days
- Encryption: All backups are encrypted and securely stored
- Deletion: Data deleted from the primary database is also removed from backups according to the backup retention schedule
7. Your Rights
7.1 Data Deletion Rights
Under GDPR and other data protection laws, you have the right to:
- Request deletion of your personal data ("Right to be Forgotten")
- Request correction of inaccurate data
- Object to processing of your data in certain circumstances
- Request restriction of processing in certain circumstances
To exercise these rights, please contact us using the information provided in our Privacy Policy.
8. Changes to This Policy
We may update this Data Retention Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date.
Related Policies: This Data Retention Policy should be read in conjunction with ourPrivacy PolicyandTerms of Service.