Retention and Account Deletion Policy

1. General Principles

Personal data is retained only for as long as necessary for its purpose. Retention considers service requirements, data minimization, security needs, contractual duties, limitation periods, and binding law. At the end of the period, data is deleted, destroyed, or anonymized.

2. Account and Authentication Data

Account-creation and authentication records that do not complete email verification are deleted after 30 days. Active user, Store, and staff records remain during the service relationship. After a verified account-deletion request, related active content normally enters the deletion process within no more than 30 days.

3. Selections and Customer Fields

Product, price, image, and selection records remain while the Store uses the service and the selection is valid. An optional customer name or note in an expired selection is automatically and permanently purged 30 days after expiry. Other selection content remains subject to the Store's account and deletion instructions.

4. Security, Communications, and Legal Records

Security and abuse records are retained for up to 90 days; short-lived request-deduplication and pseudonymous abuse-prevention identifiers normally for 14 days. Business-contact requests are retained for 12 months after the last meaningful contact. Evidence of terms acceptance and notice delivery is retained for ten years after the legal relationship ends.

5. Deletion Request Process

Account-deletion requests are sent to info@intsell.app and should state the account email and scope. Intsell verifies account ownership and authority, may suspend access where necessary, and begins deletion of linked Store, staff, selection, and media records.

The requester is informed when deletion is complete or where a legal ground requires partial refusal. Copies in provider backups are overwritten in the ordinary backup cycle and are not used for another purpose unless restored to the active system.

6. Legal Holds and Exceptions

Where a legal dispute, valid authority request, or binding retention duty applies, only relevant records may be placed on a reasoned and time-limited legal hold. General, indefinite holds are not used; ordinary deletion resumes when the reason ends.