Data Retention & Deletion Policy — Nyay360

1. Overview

Nyay360 collects and stores data that is necessary to provide the Platform’s services. We are committed to not retaining data longer than necessary and to making data deletion straightforward for users.

This policy is intended to complement our Privacy Policy, which explains what data we collect and how we use it. This policy focuses specifically on how long we keep data and what happens when you request deletion.

2. What Data We Hold

Nyay360 holds the following categories of user data:

Account data: name, email, phone number, registration date, last login
Complaint records: all complaint drafts, complaint metadata (category, company, status, payment status)
Complaint content: the text of complaint letters generated on the Platform
Uploaded evidence files: documents, images, and PDFs uploaded as supporting evidence
Payment records: Stripe session IDs, payment intent IDs, payment status, and amounts (not card numbers)
Server and access logs: IP addresses, timestamps, API requests, and error logs
AI usage logs: anonymised records of AI model interactions for quality assurance

3. Retention Periods

Data Category	Retention Period	Trigger
Account data	Active account + 30 days	After account deletion request is processed
Complaint records & drafts	Active account + 30 days	After account deletion request is processed
Uploaded evidence files	Active account + 30 days	After account deletion request is processed
Payment records (Stripe)	7 years	From date of transaction (legal/tax requirement)
Server & access logs	Up to 90 days	Rolling deletion after 90 days
AI usage logs	Up to 12 months (anonymised)	Rolling deletion after 12 months
Security incident logs	Up to 3 years	From date of incident (for investigation and legal purposes)

The 30-day grace period after account deletion allows for recovery in cases of accidental deletion or disputes. Data is permanently deleted after the grace period expires.

4. Why We Retain Data

We retain different categories of data for different reasons:

Account and complaint data during active use: to provide the service, allow you to access past drafts, and maintain your account history
Complaint data for 30 days after deletion request: to allow recovery if you deleted your account accidentally or change your mind
Payment records for 7 years: to comply with financial record-keeping requirements under US tax law and applicable accounting standards
Server logs for 90 days: to detect, investigate, and prevent abuse, fraud, and security incidents
AI usage logs for 12 months: to improve the quality and accuracy of AI-generated complaint drafts
Security incident logs for 3 years: to cooperate with law enforcement investigations if required

5. Data Deletion Requests

You can request deletion of your account and associated data at any time. To do so:

Email [email protected] with the subject line: "Account Deletion Request"
Include your registered email address and any account identifier you have
We will verify your identity before processing the request
We will confirm receipt within 5 business days and complete the deletion within 30 days
We will send a confirmation email when your data has been permanently deleted

Deleting your account will permanently remove all your complaint drafts, uploaded evidence, and account information. This cannot be undone after the 30-day grace period. Ensure you have downloaded or saved any complaint letters you need before requesting deletion.

You may also request deletion of specific data (e.g., a specific complaint or uploaded file) without deleting your entire account. Email [email protected] with the specific data you wish to have deleted and your account email address.

6. Legal Retention Exceptions

We may retain certain data beyond the periods stated above in the following circumstances:

Where required to do so by applicable law, court order, or regulatory requirement
Where data is relevant to an ongoing or anticipated legal dispute or investigation
Where data relates to a security incident that is being investigated by us or law enforcement
Where retention is necessary to enforce our Terms of Service or Acceptable Use Policy
Payment records are always retained for the full 7-year period regardless of account deletion

Where we retain data beyond your deletion request due to a legal exception, we will inform you of this and of the specific legal basis for the retention.

7. Backups & Residual Data

Nyay360 maintains database backups for operational continuity and disaster recovery. When you request data deletion:

Your data will be deleted from the live production database within the stated timeframe
Backup copies of your data may persist in encrypted backup archives for up to 30 additional days before being overwritten in the normal backup rotation cycle
We cannot selectively delete data from backup archives; backup data is overwritten in its entirety according to the backup rotation schedule
Data in backups is encrypted, inaccessible for normal use, and is never restored for standard operational purposes

This residual backup data retention period is standard practice for cloud-hosted platforms and does not affect your effective data deletion rights.

8. Contact

For data retention and deletion queries:

Privacy & deletion: [email protected]

General support: [email protected]

Wealth Building Academy LLC · Illinois, USA · https://www.nyay360.com