Data Retention & Deletion Policy

This policy describes how Allorc approaches retention, deletion, backups, and account closure.

General retention principle

We retain data for as long as reasonably necessary to provide the service, maintain security, comply with law, resolve disputes, and enforce agreements.

Common retention categories

Retention may vary by category, including:

• account and profile information;
• billing and transaction records;
• workflow, configuration, and usage logs;
• prompts, conversation content, and files;
• security, fraud, and audit-related records;
• support communications.

Account deletion

If you request deletion or close your account, we will seek to delete or de-identify applicable data within a commercially reasonable timeframe, subject to backups, legal obligations, fraud prevention, security needs, and other legitimate business requirements.

Backups and residual copies

Data may remain in backups or disaster-recovery systems for a limited period after deletion from active systems.

Legal holds and required retention

We may retain data where necessary to comply with law, resolve disputes, protect rights, or investigate abuse, fraud, or security incidents.

Requests and verification

Before carrying out deletion or access requests, we may verify identity or account authority to protect users and organizations from unauthorized changes.

Relationship to other policies

This policy should be read alongside the Privacy Policy and Security & Trust Statement.