Data Retention & Deletion Policy

Purpose: This policy operationalizes our governance strategy for storing, retaining, and securely deleting data captured across our website, mobile application, and web application (collectively, the “Platform”). It supplements our Privacy Policy and establishes clear accountability for stakeholders and data custodians.

1. Scope & Applicability

This policy applies to all Personal Data and operational data processed by Business and Beyond in connection with , including:

• Data collected via registration, referrals, networking and business tracking features;
• Session, authentication, and device metadata generated by the web and mobile apps;
• Aggregate analytics and operational metrics derived from application usage.

2. Data Categories

• Personally Identifiable Information (PII): name, email, phone number, business identifiers.
• Operational Data: referral entries, connection logs, weekly business metrics generated by users.
• System & Security Logs: session tokens, login timestamps, device identifiers.
• Anonymized Analytics: aggregated metrics and trends used for product optimization and reporting.

3. Retention Principles

We retain data in accordance with the following principles:

• Business Necessity: Data is retained only to the extent required to deliver Platform functionality and to support legitimate business operations.
• Regulatory Compliance: Where law or regulation mandates retention, we will preserve records for the statutory period.

4. Deletion (Right to Erasure) — Process & Guarantees

Users may exercise deletion rights via either mechanism below. Deletion requests will be processed in line with our governance controls and subject to verification workflows to prevent fraudulent or accidental removals.

1. Self-Service: The user may invoke Delete Account from Account Settings in the mobile or web app. This initiates an automated pipeline to remove account-linked PII from active systems.
2. Manual Request: Submit a deletion request to KaVyaaVe@gmail.com. Include the account email and relevant identifiers to accelerate verification.

Upon confirmation of deletion:

• All PII (name, contact, business identifiers) will be permanently removed from active production systems;
• Non-identifiable, aggregated analytics (e.g., referral counts, performance metrics) may be retained for statistical reporting provided they are not re-identifiable;
• Where full removal of certain non-PII structural data would jeopardize database integrity or application stability, those elements may be retained in anonymized form to preserve service continuity.

5. Cookies & Session Tokens

Our publicly facing static website does not employ cookies for tracking. The web application uses cookies strictly for functional session management to store secure refresh tokens necessary for authentication.

Cookies used by our web app are:

• Functional only: persist authentication state (refresh tokens);
• Not used for cross-site tracking: we do not use cookies to profile users for third-party advertising;
• Users may clear cookies via browser controls, though doing so may impact login persistence and session continuity.

6. Security Controls & Access Management

We enforce role-based access controls, encryption-at-rest and in-transit, and logging/monitoring to protect retained data. Access to PII is tightly scoped to personnel with a business need and is reviewed periodically as part of our governance cadence.

7. Exceptions & Legal Holds

Where applicable, data may be retained beyond standard retention windows to comply with legal holds, investigations, or dispute resolution. Such exceptions are documented, time-bound, and subject to escalation to our legal/compliance function.

8. Policy Review & Governance

This policy is reviewed at least annually or upon material change to processing activities or legal requirements. Revisions will be published to the Platform with an updated “Last Updated” date.

9. Contact & Escalation

For any questions, to request deletion, or to escalate data governance concerns, contact our data stewardship team:

View Full Privacy Policy