Data Retention & Deletion
A single, versioned schedule of how long we keep each category of data and how deletion, export and backups work.
1. Principles
We retain personal data only as long as needed for the purposes stated in the Privacy Policy or to meet legal, tax, and audit obligations. Listed retention periods are indicative and subject to operational and legal verification. Backup retention and expiry depend on the active provider configuration; a fixed 35-day cycle has not been verified.
2. Retention schedule
| Category | Retention | Notes |
|---|---|---|
| Account data (profile, email, workspace) | Life of account; post-closure period subject to verification | Deletion behaviour and analytics anonymisation are subject to verification. |
| Résumé, LinkedIn imports, Brand DNA, Strategy | Life of account | Removed on account deletion or on user request. |
| Knowledge Vault objects & embeddings | Life of account | Removed on account deletion; individual items removable in-product. |
| Generated content (posts, banners, drafts) | Life of account or until deleted by user | User deletion controls are available; backend purge completion remains subject to verification. |
| AI request traces (IGuF) | Retention duration under verification | Automated purge and de-identification controls require verification. |
| Product analytics events (PostHog) | Duration under verification | Anonymised at collection; opt-in only. |
| Support tickets & correspondence | Duration under legal review | Retained for service quality and legal defence. |
| Billing invoices & tax records | Statutory retention period subject to legal review | Retained to meet tax and accounting obligations. |
| Security logs (auth, admin, webhooks) | Duration under verification | Longer where required to investigate incidents. |
| Encrypted backups | Subject to the active provider backup configuration | Backup expiry depends on the active plan and policies. |
| Suppressed email addresses (bounces/complaints) | As required for suppression and compliance | Kept to protect sender reputation and honour unsubscribes. |
3. Account deletion
You can delete your account from Account → Data. un confirmation we soft-delete the record and queue a hard-delete job. Deletion from production services and expiry of backups depend on the implemented deletion workflow, applicable legal retention obligations and provider-specific retention settings. Exact completion windows remain subject to operational verification.
4. Data export & portability
From Account → Data you can download a portable archive of your profile, résumé variants, generated content, knowledge objects, and billing history in machine-readable JSON. We can produce a fuller export on request.
5. Backup and recovery
Database backup availability, retention, and recovery depend on the active provider plan and configured controls. Recovery test frequency is not represented here as a guaranteed schedule.
6. Data residency
Primary production database services are hosted in Mumbai, India. AI processing occurs in provider regions covered by adequacy or Standard Contractual Clauses. Enterprise customers can request specific residency commitments in their order form.
7. Individual requests
To request access, correction, deletion, restriction, portability, or objection, use Account → Data and Account → Privacy, or email grievance@yukta4u.com. We verify identity and handle requests within the periods required by applicable law; operational response times must be verified before a shorter commitment is published.