DRAFT This policy is a draft. It has not yet been reviewed by a lawyer and may change before IGNIS opens. Items marked [LAWYER] or [BUSINESS DECISION] are still being decided.
IGNIS by Saphira Data Retention Policy
Last updated: [DATE]
Product site: https://askignis.com/data-retention
We keep data only as long as we need it. Defaults below are suggestions [BUSINESS DECISION/LAWYER].
| Data | Suggested default | Notes |
|---|---|---|
| Raw message content you send (texts, emails, screenshots, attachments, links) | 90 days, then deleted | Shorter (30 days) is safer; content can include third-party data |
| Verdict summaries (scam type, date, verdict, no full content) | Life of account + 90 days | Powers history & briefings |
| De-identified scam indicators (scam URLs/numbers/patterns, no personal info) | Up to 3 years | Improves detection |
| Account info (names, emails, phones) | Life of account + 90 days | |
| Billing records & invoices | 7 years | Tax/accounting; payment card data stays with processor |
| SMS consent & opt-out records | 5 years after last message | TCPA defense (4-yr limitation) |
| Opted-out numbers (suppression list) | Indefinitely (number only) | So we never text again |
| Privacy-request records | 24 months | Required by CCPA regulations |
| Support tickets | 2 years | |
| Security/access logs | 12 months | |
| Backups | Rolled off within 35 days | Deleted data disappears from backups on this cycle |
Deletion on request or cancellation
- Request: email [PLACEHOLDER: support email]; we verify and delete within 45 days (CCPA timeline), except data we must keep by law (billing, consent records, suppression list).
- Cancellation: subscription data is kept 90 days (so you can come back), then deleted, unless you ask for sooner.
- Protected Member leaving: their messages and verdicts deleted per the schedule; Account Holder loses access immediately.
- Deletion from backups happens as backups expire.
AI vendors
- Use API/business tiers whose terms state customer data is not used for model training.
- Request zero data retention (ZDR) where the vendor offers it; otherwise document the vendor's default retention (e.g., up to 30 days for abuse monitoring) here: [VENDOR: ___ days].
- Strip or mask obvious sensitive numbers (card, SSN, bank) before sending to AI where possible.
- Signed data processing agreement (DPA) with each vendor; review yearly.
- SMS/email providers: set message-body log retention to the shortest available. [OWNER: check provider settings, e.g., message redaction.]
Review
Review this schedule at least once a year. Legal holds override deletion when litigation is expected.