Legal
Data Retention & Deletion Policy
Effective 25 September 2026 · Maintained by MetaEdx Inc · Reviewed at least every 6 months
1. Principles
We keep personal and financial data only as long as needed to provide SoftBillo, meet legal duties, and resolve disputes — in line with UK GDPR, EU GDPR, and applicable US state privacy laws (including the CCPA/CPRA) and Gramm-Leach-Bliley Act expectations for consumer financial data.
2. Retention schedule
| Data | Kept | Deletion |
|---|---|---|
| Bank access keys (Plaid, GoCardless, Mono) | Until you disconnect the bank | Deleted immediately on disconnect; access also revoked with the provider. |
| Bank accounts and transactions | While the bank is connected | Deleted automatically 30 days after disconnect. Transactions you confirmed as matched to an invoice or expense stay with that record. |
| Invoices, payments and accounting records | While your account is active | Up to 7 years where tax and accounting law requires it; otherwise deleted with your account. |
| Account and other business data | While your account is active | 30 days after cancellation (for export or reactivation), then deleted or anonymised. |
| Backups | Rolling | Deleted data is purged from backups within 90 days. |
| Security and audit logs | 12 months | Deleted automatically afterwards. |
| Support correspondence | 24 months | Deleted afterwards. |
3. How deletion happens
- An automatic clean-up runs every night and enforces the bank-data windows above.
- Disconnecting a bank (Money → Bank accounts) revokes access with the provider and deletes the encrypted access keys at once.
- You can export your data at any time and request full account deletion from Settings or at info@softbillo.com. We act within 30 days.
- Where the law requires us to keep a record (for example tax records), we keep only that record, restrict access, and delete it when the period ends.
4. Review
This policy and our Privacy Policy are reviewed at least every six months, and whenever we add a data source or provider. Each review is logged with the reviewer and date. Material changes are announced at least 30 days in advance.