| Data class | Default target | Exception/purpose |
|---|---|---|
| Business profile, verification and identifier allocation | Account lifetime; deletion normally within 30 days after closure | Verification evidence may be restricted longer for fraud, regulator or defence |
| Owners, staff, roles and linked devices | Active relationship plus 12 months | Audit/legal records retained separately |
| Customer messages and attachments | Until conversation deletion or configured retention expires | Recipient copies, reports, legal holds and backups differ |
| Call signalling/quality metadata | 12 months | Shorter geo rule or longer substantiated dispute |
| Call media | Not retained by default; authorised recordings until deletion/configured expiry | Exported copies are controlled by the Business/exporter |
| Precise/shared location | Same as associated message or live-share duration | Safety report or lawful preservation |
| Catalogs, collections and storefront history | Active plus 24 months after removal | Consumer/product dispute, recall or legal duty |
| Broadcasts, consent and suppression evidence | Campaign plus 5 years or local limitation period | Keep suppression entries as needed to honour opt-out |
| IP, device, login, session and security events | 12 months | Longer for substantiated abuse/ban evasion or law |
| KalCoin ledger, loads, redemptions, refunds and accounting | 7 years or required tax/accounting period | Public blockchains are outside Kaltiq deletion control |
| Moderation, complaints and appeals | 24 months; up to 5 years for serious/repeated abuse | Proportional safety and legal defence |
| Administrative and legal-request logs | 7 years | Shorter/longer documented local rule |
| Encrypted backups | Rolling expiry targeted within 90 days | Restored data must re-enter deletion queues |
1. Closure and deletion
Closing a Business Profile disables access, revokes sessions, begins active-system deletion/de-identification and quarantines identifiers. Customer/recipient copies, public blockchain entries, exported data and lawful records remain. Kaltiq may keep a minimal suppression/fraud record to prevent re-registration abuse.
2. Business-controlled copies
The Business is responsible for retention and deletion of exports, recordings, customer records, staff downloads and connected systems. Account deletion is not a substitute for satisfying customer requests or tax, warranty, product-safety and litigation duties.
3. Legal holds
A documented preservation request, dispute, recall, chargeback, investigation or regulator order pauses deletion only for relevant data. Held information is restricted, audited and deleted after the hold and necessary defence period end.
4. Country rules and requests
The compliance engine should apply the shortest approved country/data-class period unless a documented law requires preservation. Requests go to the privacy/DPO contact at admin@kaltiq.com. Kaltiq may verify authority and will explain lawful exceptions.