Finducation - EZBudget™
Data Retention and Deletion Policy
Defined retention schedules, deletion procedures, and annual review for consumer and Plaid-linked data.
1. Policy Statement
Deseo Developers LLC maintains a defined data retention and deletion program for consumer and operational data processed through the Finducation ecosystem, including data received from the Plaid API. Data is retained only as long as necessary for stated purposes and deleted when no longer required, subject to legal and security obligations.
2. Scope
- User account data (email, user ID, authentication metadata)
- Application data (budget scenarios, calculator inputs, saved preferences)
- Plaid-linked data (access tokens, institution metadata, transaction data used for categorization)
- Contact and support submissions
- Billing and subscription records (via Stripe)
- Operational and security logs (see Logging and Monitoring Policy, EZB-LOG-001)
3. Retention Schedule
| Data Category | Retention Period | Basis |
|---|---|---|
| Active user account & app data | While account is active; deleted within 30 days of verified deletion request | Service delivery; user request |
| Plaid access tokens & linked account metadata | While bank connection is active; removed on disconnect or account deletion | Integration purpose; user control |
| Plaid transaction data (categorized) | While account is active or as needed for budget features; deleted with account | Service delivery |
| Contact / support messages | Up to 24 months unless longer retention required for open issues | Support and dispute resolution |
| Billing records | Per Stripe retention and applicable tax/accounting requirements | Legal / financial obligation |
| Security / API logs | Per platform limits (Netlify, Supabase); minimum needed for investigation | Security operations |
4. Deletion Procedures
4.1 Consumer-Initiated Deletion
- Users may request account and personal data deletion by emailing contact@deseodevelopers.com.
- Identity is verified before deletion is performed.
- Verified deletion requests are completed within 30 days, except where law requires longer retention.
4.2 Plaid Disconnection
- When a user disconnects a bank in EZBudget, Plaid access tokens and associated sync state are revoked and removed from application storage.
- Previously categorized transactions may remain in the user's budget until account deletion unless the user requests earlier removal.
4.3 Account Termination
- On account deletion, user profile data, app state, and Plaid-linked records are removed from primary application databases.
- Backups containing deleted data expire according to provider backup retention schedules.
5. Data Subject Requests
Consumers may request access, correction, or deletion of their personal data as described in the Finducation Privacy Policy. Requests are tracked from receipt through completion.
6. Legal Holds and Exceptions
- Data subject to legal hold, active dispute, or regulatory requirement may be retained beyond standard schedules.
- Exceptions are documented with reason and expected duration.
7. Enforcement
- Retention periods are enforced through application logic, database policies, and operational procedures.
- Engineering reviews new data stores and integrations for retention classification before production use.
8. Periodic Review
- This policy and the retention schedule are reviewed at least annually.
- Reviews consider regulatory changes, new integrations (e.g., Plaid), and incident lessons learned.
- The Last Review Date at the top of this document is updated after each review.
9. Related Documents
- Finducation Privacy Policy
- Information Security and Governance Policy (EZB-ISG-001)
- Logging and Monitoring Policy (EZB-LOG-001)
10. Approval
Approved By: Deseo Developers LLC — Authorized Representative
Date: July 9, 2026
Contact: contact@deseodevelopers.com