Data Retention Policy

Data Retention Policy

This policy describes what personal data we collect, why we collect it, how long we retain it, and how you can request its deletion.

1. User Account Data

Your account information (name, email, profile details) is retained while your account is active. If you request account deletion, all associated personal information will be removed within 30 days of administrative approval. You may request deletion by contacting us or through your account settings.

2. Financial & Order Data

Order history, transaction records, tax documents, payment receipts, and affiliate data are retained for 10 years from the date of the transaction to comply with tax and accounting regulations. When a user account is deleted, financial records are kept but all personally identifiable information is removed.

3. Contact Submissions

Messages submitted through contact forms (including name, email, phone, and message content) are retained indefinitely as business correspondence records.

4. Session & Authentication Data

Session tokens and refresh tokens are automatically purged 30 days after expiration. Active sessions are retained while valid.

5. System Logs

Error logs, email delivery logs, marketplace sync logs, search queries, and bounce tracking data are retained for 90 days and then automatically deleted. Administrative audit logs (such as impersonation records) are retained for 1 year.

6. Email Queue

Unsent email queue items older than 7 days are automatically purged.

7. Marketing Data

Campaign analytics, marketing content, and related assets are retained as long as the associated campaign exists.

8. Uploaded Files

Failed image uploads are automatically cleaned up after 30 days. Successfully processed uploads are retained as long as the associated content (product, event, profile) exists.

9. Your Rights

You have the right to:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate personal data
• Request deletion of your personal data (subject to legal retention requirements)
• Withdraw consent for data processing at any time

To exercise any of these rights, please contact us through your account dashboard or email our support team.

10. Automated Cleanup

We run automated data cleanup processes daily to enforce the retention periods described above. This ensures that data is not kept longer than necessary.

Last updated: February 2026