A LevantGate productData Retention
Effective 2026-07-14 · LevantGate, Erbil, Kurdistan Region of Iraq
This policy describes how long each category of data is retained on SRP, and what happens when the retention period ends.
1. Retention schedule
| Category | Retention | Trigger for deletion |
|---|---|---|
| Active account profile | Life of the account | Account deletion request |
| Authentication credentials | Life of the account | Password reset / account deletion |
| Compound & unit records | Life of the Customer contract + 90 days | Customer offboarding |
| Billing & invoice records | Up to 7 years | Statutory tax retention period expiry |
| Payment metadata (no card numbers) | Up to 7 years | Statutory retention expiry |
| Support tickets & attachments | 2 years after last activity | Retention expiry / user request |
| In-app messages | 2 years after last activity | Retention expiry / user request |
| Push notification tokens | Until device un-registration | Device inactivity 180 days |
| Security audit logs | Up to 12 months | Rolling deletion |
| Diagnostic / crash logs | Up to 90 days | Rolling deletion |
| Web server access logs | Up to 30 days | Rolling deletion |
| Encrypted backups | Up to 30 days | Backup rotation |
2. Deletion process
When a retention period ends, records are hard-deleted from live systems and then cycled out of encrypted backups within the backup rotation window. Where full deletion is not possible without breaking legal records (e.g. accounting entries), we anonymise personal identifiers so the record no longer identifies you.
3. User-initiated deletion
You can request earlier deletion of specific categories at any time. Records subject to a statutory retention period will be marked for deletion and cleared as soon as the statutory period expires. See Delete Account and Delete Data.
4. Contact
info@levantgate.com · LevantGate, Erbil, Kurdistan Region of Iraq.