Data Retention Policy

# Data Retention Policy — MyApp
**Last Updated:** 2026-06-09

## Retention Schedule

| Data Type | Retention Period | Deletion Method | Legal Basis |
|---|---|---|---|
| Access logs | 90 days | Automatic purge | Operational necessity |
| Audit logs | 7 years | Automatic purge | Operational necessity |
| Customer PII | 3 years after account closure | Secure deletion + certificate | Art. 5(1)(e) GDPR |
| Transaction records | 10 years | Secure deletion + certificate | Tax / accounting law |
| Support tickets | 2 years | Secure deletion + certificate | Operational necessity |
| Marketing emails | 2 years | Secure deletion + certificate | Art. 5(1)(e) GDPR |
| System metrics | 30 days | Automatic purge | Operational necessity |
| Backups | 1 year | Secure deletion + certificate | Operational necessity |

## Implementation Notes
- Run retention jobs on a scheduled basis (daily/weekly)
- Log all deletions to immutable audit trail
- Anonymize rather than delete where required by law
- Right to erasure requests (GDPR Art. 17) override standard retention
- Backups follow a separate schedule — ensure purge propagates to all replicas