retention-and-deletion-policy-v0.1.md
1. Purpose
TradeBoard keeps data only for as long as needed for business workflow, customer records, security, legal compliance and dispute handling.
2. Account data
Account data is kept while the account is active. After an account is disabled or closed, TradeBoard may keep limited account records for a reasonable period to support audit, legal, security and customer administration needs.
During beta, exact account retention periods are not final. TradeBoard will finalise standard retention periods before paid launch.
3. Deal records
Deal records, comments, timeline events, document status and access history may be kept while needed by customer organisations for vehicle deal records, audit and dispute handling.
Customers should export or retain any records they need outside TradeBoard.
4. Uploaded files
Uploaded files may be retained while the related deal is retained. If a file is deleted, it may remain in backups for a limited period before permanent removal.
5. Pending access and invitations
Pending access records may be kept while needed to allow invited users to register and access relevant deals. Old pending invitations should be reviewed and removed periodically.
6. Legal acceptance records
Legal acceptance records may be kept for as long as needed to prove acceptance of the relevant version of Terms, Privacy Notice, Acceptable Use Policy or other legal documents.
7. Security and audit logs
Security and audit logs are kept for a limited period unless needed for investigation, legal compliance or dispute resolution.
During beta, exact log retention periods are not final. TradeBoard will finalise standard log retention before paid launch.
8. Backups
Deleted data may remain in backups until those backups expire or are overwritten. Backup deletion may not be immediate.
9. Deletion requests
Users or customer organisations may request deletion. TradeBoard will assess the request against legal, contractual, security and customer record requirements.
Where TradeBoard is acting as processor, deletion requests may need to be handled by or approved by the relevant customer organisation.
Beta deletion or export requests should be sent to hello@tradeboard.uk. During beta, export and deletion tools may be limited, so requests may be handled case by case.
10. Exceptions
TradeBoard may keep data longer where necessary for:
- legal claims or disputes;
- security investigations;
- fraud or misuse prevention;
- regulatory or legal obligations;
- enforcing agreements.