Data Retention Policy

1. Purpose

This Data Retention Policy describes how NFC Employee Tracker retains and deletes Customer data. The purpose of this Policy is to ensure that data is retained only as long as necessary for the operation of the Service.

2. Customer Data Ownership

All Customer data remains the property and responsibility of the Customer. The Customer determines:

• Which data is uploaded
• Why data is processed
• Retention requirements
• Deletion requirements

3. Active Accounts

While a Subscription remains active, Customer data may be stored and processed to provide the Service. This may include:

• Employee records
• Attendance logs
• NFC identifiers
• GPS check-in records
• Employee photographs
• Uploaded documents
• Reports
• Inventory records
• Incident records

4. Account Cancellation

Upon cancellation or termination of a Subscription:

• Customer access may remain available during a grace period of up to thirty (30) days
• Data may remain available during this period

5. Data Deletion

Following the grace period, Customer data may be permanently deleted. Deleted data may include:

• Employee profiles
• Attendance records
• GPS data
• Photographs
• Uploaded documents
• Reports
• Inventory records
• Incident records

Deletion may be irreversible.

6. Backups

Certain information may remain temporarily within encrypted backup systems. Backup retention may vary between 7 and 60 days depending on infrastructure requirements. Backup data is automatically removed according to backup lifecycle procedures.

7. Legal Requirements

The Company may retain limited information where required by:

• Applicable laws
• Regulatory obligations
• Fraud prevention requirements
• Security investigations

8. Policy Changes

This Policy may be updated periodically.