Data Retention & Deletion Policy

CapEngage adheres to data minimization principles under GDPR, CCPA, and DPDP Act 2023. We store Customer Data and personal records only for as long as necessary to provide contracted services, fulfill legal obligations, or resolve commercial disputes.

Below is our standard retention schedule across platform data stores:

• Active Customer CRM & CDP Profiles: Retained for the full duration of your active subscription term to enable segmentation and history tracking. • Raw Event Logs & Telemetry: Detailed event logs (email opens, link clicks, webhook payloads, raw IP logs) are retained for ninety (90) days, after which they are automatically purged or aggregated. • Aggregated Campaign Metrics: Anonymized reporting metrics (monthly send counts, open rates, conversion totals) are retained for twenty-four (24) months for reporting dashboards. • Billing & Tax Records: Invoices and transaction receipts are retained for seven (7) years to comply with statutory tax laws.

When a subscription is canceled or terminated:

1. Soft-Delete Window (Days 1–30): Customer Data is maintained in a dormant, read-only soft-delete state for thirty (30) days to allow Customer to export data or reactivate their account. 2. Permanent Data Purge (Days 31–60): Following the 30-day export window, all database records, contact lists, golden profiles, and campaign assets are permanently hard-deleted from production database clusters. 3. Backup Rotation Purge (Days 61–90): Automated encrypted database backups rotate out on a 30-day cycle. All residual data is completely expunged from backup snapshots within 90 days of termination.

CapEngage provides dashboard tools and REST APIs (`DELETE /v1/contacts/{id}`) enabling Customer to execute Right to be Forgotten requests for individual end-users.

Executing an erasure command permanently anonymizes or deletes the end-user's contact record, event logs, and messaging history across all database indexes within thirty (30) days.