Data Retention and Deletion Policy

This Data Retention and Deletion Policy explains how long Furcata retains different categories of data and how that data is deleted. It applies to data processed through the Furcata messaging platform (the 'Services').

This policy should be read together with our Privacy Policy and our Data Processing Addendum.

1. Scope

This policy covers data we process as a controller (such as account and billing data) and data we process on behalf of our customers (such as contact data and message content). Where we process data on behalf of a customer, the customer determines the retention period for its own data, subject to the limits described below.

2. Retention Principles

We retain data only for as long as necessary to provide the Services, to meet our legal and regulatory obligations, to resolve disputes, and to enforce our agreements. When data is no longer needed, we delete it or anonymize it.

3. Retention Schedule

The following retention periods apply by default:

  1. Account and profile data: retained for the life of the account and deleted or anonymized within 90 days after account closure, unless a longer period is required by law.
  2. Billing and transaction records: retained for the period required by applicable tax and accounting law, typically up to 7 years.
  3. Contact data: retained while the customer's account is active and deleted within 90 days after account closure or earlier on customer request.
  4. Message content and metadata: retained for the period configured by the customer, and by default for up to 12 months, after which it is deleted or anonymized.
  5. Message delivery and compliance records (such as consent and opt-out records): retained for as long as necessary to demonstrate compliance, typically up to 5 years.
  6. Support and communication records: retained for up to 3 years after the related matter is closed.
  7. Security and audit logs: retained for up to 12 months, or longer where required for security investigations.

4. Account Deletion

A customer may request deletion of its account and associated data by contacting support@furcata.com. We will process verified deletion requests within 30 days, subject to any legal retention obligations.

5. Legal Holds and Regulatory Retention

We may retain data beyond the periods above where we are required to do so by law, regulation, court order, or a lawful request from a competent authority, or where retention is necessary to establish, exercise, or defend legal claims.

6. Deletion Methods

When data reaches the end of its retention period, we delete it using methods designed to prevent recovery, or we irreversibly anonymize it so that it can no longer be associated with an individual.

7. Backups

Data may persist in encrypted backups for a limited period after deletion from active systems. Backup data is deleted on the normal backup rotation cycle and is not used for any purpose other than disaster recovery.

8. Customer Responsibilities

Customers are responsible for configuring retention settings appropriate to their own legal and regulatory obligations, for exporting any data they need to keep before closing their account, and for complying with their own data retention duties toward their contacts.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected in the Last updated date above.

10. Contact

Questions about this policy can be sent to support@furcata.com.