Delete and Retain Personal Information

Data retention and deletion policy

1. Data Lifecycle Governance

At Urban Khata, we adhere to a disciplined approach regarding the lifespan of your information. We do not store data indefinitely. Instead, we retain your personal information only for the duration required to deliver our bookkeeping services, maintain a secure platform, and satisfy the statutory requirements under Indian law. Once these purposes are fulfilled, your data is systematically purged.

2. Specific Retention Timelines

We categorize user data based on its sensitivity and operational necessity, applying distinct retention periods to each category:

2.1. Core Identity and Compliance Records

  • Data Scope: Mobile Phone Number, Email Address, and User IDs.
  • Retention Period: These identifiers are retained for the entire duration of your active account. Upon account closure, we are legally mandated to archive this data for a period of five (5) years.
  • Reasoning: This ensures compliance with Indian IT regulations and financial standards regarding user identification, audit trails, and anti-money laundering protocols.

2.2. Security and Risk Assessment Data

  • Data Scope: Installed Applications, Call Logs (verification metadata), and Emergency Contact information.
  • Retention Period: We store this data while your account remains active to continuously monitor the security environment. Following account termination, this data is retained for a buffer period of 90 days before being permanently deleted.
  • Reasoning: This allows us to resolve any post-termination disputes and ensures that the data is available for fraud analysis if suspicious activity is detected immediately prior to closure.

2.3. Technical Telemetry and Device Fingerprinting

  • Data Scope: Device Hardware Information, Approximate Location, and Crash Logs.
  • Retention Period:
    • Device Fingerprints (Hardware/Location): Retained for three (3) years from the last activity to prevent fraud recidivism and block unauthorized devices.
    • Crash Logs: Anonymous technical logs are purged after a 12-month cycle.
  • Reasoning: This helps us maintain platform stability and prevents previously banned devices or bots from re-accessing the system.

3. Manual Deletion Requests

You have the right to request the erasure of your personal data at any time.

  • Procedure: Please submit a formal request via email to business@dbssolutionsprivatelimited.com using your registered email address.
  • Processing Time: We are committed to verifying and executing valid deletion requests within 15 business days.
  • Result: Upon completion, your data is permanently removed from our active production servers, barring any records we are required to keep by law.

4. Dormancy Protocol

To prevent the accumulation of unused data, we implement an automatic cleanup policy for inactive accounts.

  • Criteria: Accounts that exhibit no login activity for a continuous period of 18 months.
  • Action: We will issue a warning notification 30 days prior to the scheduled deletion. If no activity occurs during this grace period, the account and associated data will be automatically erased.