Data Retention Policy
How long Debryx retains your data and when it is deleted.
Last updated:
Overview
This Data Retention Policy explains how long Debryx retains different categories of data, the criteria used to determine retention periods, and how data is securely disposed of when retention periods expire.
Retention Schedule
| Data Category | Retention Period | Rationale |
|---|---|---|
| Waste Batch Records | 7 years from creation | Regulatory compliance (CPCB) |
| User Account Data | Duration of subscription + 90 days | Service delivery and account management |
| Audit Logs | 7 years | Regulatory and legal requirements |
| Uploaded Evidence | 7 years | Linked to waste batch records |
| Session Data | 24 hours (or until logout) | Session management |
| Billing Records | 7 years from invoice date | Tax and accounting compliance |
| Support Tickets | 3 years from resolution | Service improvement and reference |
Data Deletion Process
When data reaches the end of its retention period, it is securely deleted as follows:
- Database Records: Permanently deleted via automated purge scripts executed during maintenance windows
- File Storage: Files (evidence images, documents) are permanently removed from Cloudinary including all backup copies
- Backups: Encrypted backups are retained for a maximum of 90 days; expired data is purged from all active and archived backups
Account Termination
When a subscription is terminated, account data is retained for 90 days to allow for data export or reactivation. After 90 days, all personal data is permanently deleted. Waste batch records are retained for the full 7-year regulatory period even after account termination, but are disassociated from individual user accounts.
Legal Holds
In the event of litigation, regulatory investigation, or other legal proceeding, data that would otherwise be deleted will be preserved under a legal hold until the matter is resolved. Affected data subjects will be notified where required by law.
Data Export
Customers may request a data export of their data at any time during their subscription or within the 90-day post-termination period. Export requests should be sent to support@debryx.in. Exports are delivered in CSV or JSON format within 14 business days.
Policy Updates
This retention policy is reviewed annually. Customers will be notified of material changes via email.