Data Retention Policy

1. Principles

We keep personal data only for as long as it is needed to provide the Services, to meet legal obligations such as keeping financial records, to resolve disputes, and to keep the Services secure. When a period ends, we delete the data or anonymize it so it can no longer identify anyone.

Each business decides how long it keeps its own customer records while it uses Converx, and can delete a customer record at any time. The periods below apply to what Converx does.

2. Retention periods

3. When a business stops using Converx

• When a subscription ends, the organization becomes read-only. Its data stays available to view and export.
• Converx notifies the Owner at least 30 days before archiving the organization and invites the Owner to export its data.
• Archiving ends all access and signs everyone out. Data is kept, unavailable, for a 90-day recovery period, during which the organization can be restored in full.
• After the recovery period, the organization's data is irreversibly deleted or anonymized, except records the law requires us to keep.

Archiving and deletion are actions a Converx administrator takes with a recorded reason, and both are recorded in the audit log.

4. When a business deletes a customer record

Deleting a customer record removes the customer's identity, contact details, notes, photos, and marketing preferences, and ends any link with a customer account. Completed sales are kept for financial reporting with the customer replaced by an anonymous reference, and loyalty or membership balances are closed and recorded as closed. Deletion cannot be undone.

5. When you delete your customer account

Deleting your customer account signs you out everywhere, removes your profile, and ends your links with businesses, which withdraws everything you shared through them. It does not delete the records each business keeps about its own customers; to remove those, ask each business, or ask us and we will pass the request on.

Your reviews stay published unless you remove them before deleting your account or ask us to remove them at privacy@converx.net.

6. Backups

Deleted data remains in encrypted backups until those backups expire, within 30 days. We do not restore backups to recover data that was deliberately deleted, and if a restore is ever needed for another reason, we re-apply recorded deletions.

7. Legal holds

We may keep specific data longer when the law requires it, or when it is needed to establish, exercise, or defend a legal claim or to investigate fraud or a security incident. We keep it only for as long as that need lasts.