TaxMap
Data Retention Policy
This policy explains how long TaxMap keeps different categories of data and when we delete or anonymise it. Retention periods balance providing the service you expect with minimising unnecessary storage.
1. Account & profile data
- Active accounts — kept while your account remains open so we can sync tax profile, regime preference, and opportunity progress.
- Account closure / deletion request — we aim to delete or irreversibly anonymise personal account data within 30 days of a verified request, except where a longer period is required for legal, security, or dispute reasons.
- Inactive accounts — accounts with no successful sign-in for 24 months may be emailed a notice and, if still unused, deleted or anonymised.
2. Tax planning & opportunity data
- CTC, deductions, comparison results, and roadmap statuses tied to your account are retained for the life of the account (see above).
- Guest / local-only calculations stored on your device remain until you clear app data or uninstall; we do not control on-device retention after that.
- Optional text you paste for imports is processed to produce estimates; we do not intend to keep raw pasted documents longer than needed for the request and short-term debugging (typically purged from application logs within 90 days).
3. Authentication & security
- Refresh tokens / sessions — expire per token lifetime (typically up to 30 days) and are invalidated on logout where supported.
- Password hashes — retained while the account exists; removed with account deletion.
- Admin audit logs — retained up to 12 months for security and operational review, then deleted or aggregated.
4. Notifications
- Device push tokens are kept while notifications are enabled and the account/device association remains valid.
- Tokens are removed on logout, token rotation, or when the push service reports them invalid — and with account deletion.
5. Technical logs
- Application and access logs (for example request time, path, status, IP) are retained up to 90 days for reliability and abuse prevention, then deleted or rotated.
- Security-incident related records may be kept longer if needed to investigate or meet legal obligations.
6. Backups
Database and infrastructure backups may retain copies of data for up to 35 days (or the backup window of our host). Deleted data may remain in encrypted backups until those backups expire, after which it is removed with the backup cycle.
7. Aggregated / anonymised data
We may retain statistics that cannot reasonably identify you (for example overall feature usage counts) without a fixed deletion date, to improve TaxMap.
8. How to request deletion
Email privacy@erevolutionsindia.com from your registered address with subject “TaxMap data deletion”. We may ask for reasonable verification before acting. Uninstalling the mobile app removes local data but does not by itself delete your server account.
9. Changes
We may update these periods when our systems or legal duties change. The effective date at the top will be revised accordingly.