At GrowthX Analytics Pvt. Ltd., we prioritize user privacy and the responsible handling of personal data. This User Data Retention Policy outlines our practices for retaining user data, the reasons for retention, and the steps we take to ensure the proper deletion or anonymization of data once it is no longer needed.
Our policy complies with global data protection regulations such as the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable laws, to ensure users’ rights to privacy and data protection are respected.
Purpose of Data Retention
We collect and retain personal data only for legitimate purposes and in compliance with applicable laws. The primary purposes for retaining user data are:
- Provision of Services: To facilitate the functionality of GrowthX Marketing API and any related services.
- Legal and Regulatory Compliance: To comply with accounting, tax, and other legal obligations.
- Business and Analytics: To improve services, conduct analytics, and perform user research.
- Communication: To communicate with users regarding updates, system maintenance, or user support.
- Security: To protect against fraud, security threats, and unauthorized access.
Types of Data We Retain
The types of personal data we retain may include but are not limited to:
- Personal Identifiable Information (PII): Name, email address, phone number, business details, and other personally identifiable information.
- Account Information: User account registration details, settings, preferences, and subscription information.
- User-Generated Content: Any content generated by users, such as posts, comments, interactions with the service, and media uploaded by the user.
- Transactional Data: Details related to purchases, transactions, and payments.
- Technical Data: Information about device usage, IP addresses, log data, cookies, and other technical identifiers.
Data Retention Period
We retain user data for as long as necessary to fulfill the purpose for which it was collected, or as required by law. Specific data retention periods are outlined below:
- Account Data: Retained as long as the user’s account is active. After account deletion, data will be retained for 30 days to ensure proper deletion from systems.
- User-Generated Content: Retained for the duration of the user’s account, then deleted or anonymized within 90 days after account deletion.
- Transactional Data: Retained for 7 years, in compliance with legal requirements for tax, financial, and accounting purposes.
- Backup and Disaster Recovery Data: Retained in backup systems for 6 months, in compliance with business continuity and disaster recovery protocols.
- Technical Data: Retained for 12 months for security, troubleshooting, and service optimization purposes.
Reasons for Data Retention
We retain data for several key reasons, including but not limited to:
- Service Continuation: To provide users with uninterrupted service, updates, and maintenance.
- Legal Compliance: To fulfill our obligations under applicable law, including tax, financial reporting, and regulatory compliance.
- Business Purposes: For analytical, marketing, and research purposes, including improving the GrowthX Marketing API.
- Security and Fraud Prevention: To protect against unauthorized access, fraud, and other malicious activities.
- User Requests: To respond to user support inquiries, troubleshoot issues, and provide account management services.
Deletion of User Data
Once data has fulfilled its purpose, it will be deleted or anonymized. The deletion process includes:
- Permanent Deletion: When data is no longer needed or when a user requests deletion, the data will be permanently removed from active systems and servers.
- Anonymization: If we need to retain data for analytical purposes, we will anonymize the data to ensure that individuals cannot be identified.
- Backup Deletion: Data retained in backups will be deleted or anonymized after 6 months, in line with business continuity policies.
Retention and Third-Party Services
We utilize third-party services for cloud storage, payment processing, analytics, and other business operations. These third-party services are committed to complying with data protection laws and ensuring the security of your personal data. Our agreements with third-party providers stipulate that they must delete or anonymize data upon request or after the retention period expires.
Third-party service providers with access to your data include:
- Cloud Storage Providers: Data stored in cloud services will be managed in compliance with applicable data protection laws.
- Payment Processors: Personal and transactional data related to payments will be retained as necessary for processing and compliance.
User Rights
Users have specific rights under applicable data protection laws. These include:
- Right to Access: You have the right to access the personal data we hold about you.
- Right to Rectification: You can request corrections to any inaccurate or incomplete data we have about you.
- Right to Erasure: You have the right to request that we delete your data, subject to legal or contractual obligations.
- Right to Restrict Processing: You may request that we limit the processing of your personal data.
- Right to Object: You may object to the processing of your personal data for specific purposes, including direct marketing.
- Right to Data Portability: You can request that your data be transferred to another service provider in a structured, commonly used, machine-readable format.
Retention and Social Media Integrations
If you have integrated third-party social media accounts (e.g., Facebook, Instagram, LinkedIn, etc.) with the GrowthX Marketing API, the data retention practices of these platforms apply to the data collected through their APIs. You should consult their privacy policies for specific information regarding the retention and deletion of your data on these platforms.
How We Protect User Data
We take all reasonable steps to protect the data we retain, including:
- Encryption: We use encryption techniques to protect sensitive data both in transit and at rest.
- Access Control: We restrict access to personal data to authorized personnel only.
- Regular Audits: We conduct regular audits of our data retention practices and security measures.
- Data Minimization: We minimize the amount of data we collect and retain, ensuring that we only keep what is necessary.
We may update this User Data Retention Policy to reflect changes in business practices, legal requirements, or service offerings. We will post the updated policy on our website and notify users of any significant changes.
Contact Us
If you have any questions or concerns regarding this User Data Retention Policy, please contact us at:
Conclusion
This User Data Retention Policy outlines our commitment to responsible data handling, ensuring that your data is protected, retained only for necessary purposes, and deleted when no longer needed. We adhere to the highest standards of privacy and comply with relevant data protection laws.
