Data Retention & Deletion Policy
Company: Payzario Inc. | Effective Date: April 2025 | Version: 1.0
1. Purpose
This policy establishes guidelines for how Payzario retains and deletes customer and operational data. The goal is to retain data only as long as necessary and ensure secure deletion when data is no longer needed.
2. Scope
This policy applies to all customer data, financial data (including Plaid-sourced data), system logs, and operational records stored by Payzario.
3. Retention Schedule
| Data Type | Retention Period | Reason |
|---|---|---|
| Customer Account Data | Duration of account + 2 years | Service continuity & legal |
| Financial Transaction Records | 7 years | Financial regulations |
| Plaid Access Tokens | Until account disconnected | Security — revoked on disconnect |
| Bank Transaction Data | 12 months | Feature functionality |
| System Logs | 90 days | Security monitoring |
| Support Tickets | 3 years | Dispute resolution |
| Waitlist / Marketing Leads | 2 years or until opt-out | Marketing compliance |
| Deleted Account Data | 30 days post-deletion request | Verification & recovery |
4. Data Deletion Process
Users may request deletion of their data by emailing:
📧 To: support@payzario.com
📌 Subject: Data Deletion Request
Upon receiving a valid request, Payzario will delete or deactivate the following within 30 days:
- Account profile and personal information
- Linked Plaid data and access tokens (revoked via Plaid's API)
- Stored bill data and bill history
- Payment-related data not required for legal retention
⚠️ Exception: Legally required transaction records (e.g., for financial compliance or fraud prevention) will be retained for the minimum period required by law, then permanently deleted.
- Deletion confirmation is sent to the user's email within 30 days.
- All deletion actions are logged in the audit trail for compliance purposes.
- Deleted data is purged from backups within the next scheduled backup cycle.
5. Customer Rights
Customers may request deletion of their data at any time by emailing support@payzario.com with the subject line "Data Deletion Request". We will confirm and complete the deletion within 30 days.
6. Policy Review
This policy is reviewed annually or when applicable laws or data handling practices change.
Owner: Payzario Inc. | Contact: support@payzario.com