Principle
We keep data only as long as needed for purpose, legal duties, security or defense, then delete, anonymize or block as appropriate.
Accounts and profiles
Recurring account after suspension: operational recovery window up to 90 days. Tax, contract or dispute records may be blocked and retained separately.
Reservations
Operational target: 12 months. Documented disputes may justify retaining necessary evidence up to 3 years or the applicable legal period.
Orders
Export may be available for 30 days; operational retention up to 90 days, then deletion/anonymization/blocking as applicable.
Security
Raw IP and low-level technical logs: short target, typically around 30 days unless a documented incident requires more.
Contract identity
Raw identity copy used for verification: target deletion 90 days after verification absent a dispute or legal duty. Verification result/representation records may remain for the relationship plus applicable defense period.
Backups
Deletion is propagated through backup cycles; restored backups must reapply active deletion instructions.