Data Retention Policy

This document establishes the data retention schedules and data lifecycle rules for Pluto user records.

1. Retention Principles

We operate on a data minimization mandate. Personal data is retained only for the duration necessary to fulfill transactions, maintain seller catalogs, and satisfy audit requirements.

2. Database Retention Schedule

• User Account Details: Retained for the duration of account activity. Purged immediately upon account deletion.
• Onboarding Files & Government IDs: Deleted within 30 days of a verified vendor account closure.
• Chat History & Logs: Thread logs and message files are removed within 30 days of thread deletion or user account closure.
• Device Location Cache: Deleted immediately upon exiting the session.

3. Financial & Tax Exceptions

To comply with local tax codes and anti-money laundering regulations, transaction logs and payment receipt ledgers are retained for a minimum of 7 years. During user deletion, these financial records are anonymized to protect the user's privacy while preserving legal ledgers.

4. Purging & Anonymization Process

When user accounts are purged, the system deletes user data cascades from databases, and issues command requests to delete corresponding assets on Cloudflare R2 CDN storage.