Data Retention & Deletion Policy

We keep your data only as long as we need it to provide the Service, meet our legal obligations, and protect our users. This page explains our standard retention windows and how to request deletion of your information.

1. Retention schedule

• Account & workspace data — retained while your account is active and for 90 days after account closure, then permanently deleted (except where law requires longer).
• CRM content (leads, contacts, notes, templates, campaigns) — retained for the life of your account; deleted within 90 days of account closure or on verified deletion request.
• Email send logs (recipient, subject, opens, clicks, bounces) — 12 months, then automatically purged.
• Audit logs (admin actions, sign-ins, role changes, integration connect/disconnect) — 24 months for security and legal compliance.
• Billing records & invoices — 7 years as required by tax and accounting law.
• Suppression / unsubscribe list — retained indefinitely so we can honor opt-outs across future campaigns.
• Backups — encrypted backups are rotated on a 35-day rolling window; deletion requests are honored in production immediately and propagate through backups within 35 days.

2. Your right to deletion

You may request deletion of your personal information at any time:

• Self-service: from Settings → Account → Delete Account inside the app.
• By email: write to privacy@billslash.app from the email on file. We respond within 30 days (45 days for CCPA requests, extendable once with notice).

Where you act as a data controller for recipients you contact through the Service, you can delete individual contacts or bulk-delete from inside the app; we will assist with controller-initiated requests on request.

3. Exceptions

We may retain limited information after deletion to:

• comply with legal, tax, or regulatory obligations (e.g., invoices, fraud records);
• resolve disputes or enforce our agreements;
• keep your address on our suppression list so we can continue to honor an unsubscribe.

4. Secure deletion

Production data is deleted using cryptographic erasure where applicable and overwritten in our primary database. Encrypted backups expire on the rolling window described above; we do not restore deleted records back into production.

5. Contact

Questions or requests: privacy@billslash.app.