1. Data Lifecycle & Retention Philosophy

Ventrexs AI adheres to strict data minimization principles under GDPR Article 5(1)(e). We retain personal and business information only for as long as necessary to fulfill the operational, contractual, and statutory accounting purposes for which it was gathered.

2. Category-Specific Data Retention Schedule

Data Category	Data Elements	Active Retention	Post-Deletion Timeline
User Accounts & Authentication	User name, email, password hash, role, 2FA settings	Duration of active account	Purged within 30 days
Customer CRM Directory	Client names, client emails, phone numbers, billing addresses	Duration of active business workspace	Purged within 30 days
Tax Invoices & Transaction Ledgers	Invoice numbers, payment records, issue/due dates, subtotal, tax breakdown	Duration of subscription	7 years (Statutory accounting & tax audit laws)
Communication & Telephony Logs	Message IDs, delivery statuses, transmission timestamps	90 days rolling window	Automatically pruned after 90 days
Security & Audit Logs	IP address, session timestamps, authorization failure events	12 months rolling window	Automatically pruned after 12 months
Database Backup Snapshots	Encrypted full database point-in-time archives	30 days rolling disaster recovery	Overwritten/destroyed after 30 days

3. Account & Data Deletion Workflows

When an account deletion is initiated via our in-app settings or public request form:

• Immediate Action: User session is invalidated, and personal login credentials are removed.

• 30-Day Hard Purge: All customer directories, draft invoices, and personal communication records are permanently deleted across our database and replica clusters within 30 calendar days.

• Statutory Preservation: Finalized, settled commercial tax invoices are retained in anonymized, read-only format strictly to comply with corporate tax laws (Net 7 years).

4. Submitting a Deletion Request

You can trigger account deletion immediately through Settings > Danger Zone or submit a request via our public Account Deletion Portal.

2. Category-Specific Data Retention Schedule

Data Category	Data Elements	Active Retention	Post-Deletion Timeline
User Accounts & Authentication	User name, email, password hash, role, 2FA settings	Duration of active account	Purged within 30 days
Customer CRM Directory	Client names, client emails, phone numbers, billing addresses	Duration of active business workspace	Purged within 30 days
Tax Invoices & Transaction Ledgers	Invoice numbers, payment records, issue/due dates, subtotal, tax breakdown	Duration of subscription	7 years (Statutory accounting & tax audit laws)
Communication & Telephony Logs	Message IDs, delivery statuses, transmission timestamps	90 days rolling window	Automatically pruned after 90 days
Security & Audit Logs	IP address, session timestamps, authorization failure events	12 months rolling window	Automatically pruned after 12 months
Database Backup Snapshots	Encrypted full database point-in-time archives	30 days rolling disaster recovery	Overwritten/destroyed after 30 days

3. Account & Data Deletion Workflows

When an account deletion is initiated via our in-app settings or public request form:

• Immediate Action: User session is invalidated, and personal login credentials are removed.

• 30-Day Hard Purge: All customer directories, draft invoices, and personal communication records are permanently deleted across our database and replica clusters within 30 calendar days.

• Statutory Preservation: Finalized, settled commercial tax invoices are retained in anonymized, read-only format strictly to comply with corporate tax laws (Net 7 years).

Data Retention & Deletion Policy

1. Data Lifecycle & Retention Philosophy

2. Category-Specific Data Retention Schedule

3. Account & Data Deletion Workflows

4. Submitting a Deletion Request

Data Retention & Deletion Policy

1. Data Lifecycle & Retention Philosophy

2. Category-Specific Data Retention Schedule

3. Account & Data Deletion Workflows

4. Submitting a Deletion Request