Data Retention Policy

At dxTheory, we are committed to retaining your personal data only for as long as necessary to fulfill the purposes for which it was collected, provide our services, comply with legal obligations, and resolve disputes.

This Data Retention Policy outlines our practices regarding data storage, retention periods, and deletion procedures. It should be read in conjunction with our Privacy Policy and Terms of Service.

We employ automated processes to delete data that has exceeded its retention period:

• Expired Insight Access: After 3 months, access to purchased insights is automatically revoked unless renewed with additional tokens.
• Expired Invitations: Team and engineer invitations expire after 7-14 days and are automatically cleaned up.
• Old Activity Logs: Activity logs older than 12 months are automatically purged from our systems.
• Inactive Accounts: Accounts with no activity for an extended period may be subject to deletion after prior notice to the account holder.

You have the right to request deletion of your personal data at any time.

Where possible, we anonymize or pseudonymize data rather than delete it, allowing us to maintain aggregate statistics while protecting your privacy:

• Usage Statistics: We retain aggregate analytics (e.g., total insights generated, feature usage patterns) without personal identifiers
• Performance Metrics: System performance data is retained in anonymized form to improve our services
• Research Data: Anonymized data may be used for research and service improvement

Anonymized data cannot be re-identified and is not subject to deletion requests.

We maintain regular backups of our systems for disaster recovery and business continuity:

• Backup Frequency: Daily encrypted backups
• Backup Retention: Backups are retained for up to 90 days
• Secure Disposal: Expired backups are securely destroyed using industry-standard methods

Data that has been deleted from our production systems may persist in backups for the backup retention period. We do not restore deleted data from backups except in cases of system recovery.

In certain circumstances, we may be required to retain data longer than specified in this policy:

• Legal Proceedings: Data relevant to ongoing or anticipated litigation may be preserved
• Regulatory Requirements: Data may be retained to comply with legal, regulatory, or audit requirements
• Law Enforcement: Data may be preserved in response to valid legal requests from law enforcement
• Fraud Prevention: Data related to suspected fraud or abuse may be retained for investigation

When a legal hold is lifted, normal retention policies will resume.

We may update this Data Retention Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.

For significant changes that affect how we retain your data, we will provide additional notice, such as an email notification or a prominent notice on our services.

We encourage you to review this policy periodically to stay informed about our data retention practices.

If you have any questions about this Data Retention Policy or want to exercise your data rights, please contact us at:

Email: [email protected]

We will respond to your inquiry within 30 days.