Operational policy
Data Retention and Deletion Rules
Introduction
These rules apply to Customer organizations, Users, and data processed through Tauri Pro. They are incorporated into the Customer Terms, Privacy Policy, and DPA. The Customer Terms control contractual conflicts, the DPA controls data-protection conflicts, and this document governs operational procedures.
Retention Schedule Summary
| Data category | Standard retention | Trigger |
|---|---|---|
| Active Customer Data | Duration of subscription | Active subscription |
| Post-termination Customer Data | 30-day export window | Subscription termination |
| Inactive organization data | Retained — no inactivity deletion | Not applicable |
| Removed User profile | Deleted or anonymized within 30 days | Administrator removes User |
| AI Input and output | According to the current AI sub-processor terms and Customer Data lifecycle | AI session and account lifecycle |
| Encrypted backups | Limited rolling period determined by active backup configuration | Backup snapshot creation |
| Logs and business records | As required for security, accounting, support, and applicable law | Record creation |
1. Active Subscription Retention
During an active subscription, Tauri Pro retains Customer Data and makes it available to authorized Users and for export. Security and access controls described in the DPA apply throughout.
2. Inactive Organizations
2.1 No Inactivity Deletion
Tauri Pro does not delete organizations for inactivity. An organization is retained for as long as it exists, no matter how long it goes without a login, and no warning or deletion notice is sent on an inactivity timer.
2.2 How Data Is Removed Instead
Customer Data is removed in exactly two ways: on a deletion request from an authorized Organization Director (section 4), or at the end of the post-termination export window (section 3). Both are actions someone takes, not a clock running out.
Retention is governed by a single setting, INACTIVE_ACCOUNT_RETENTION_MONTHS, which is currently unlimited. If a future release introduces an inactivity period, this document and the Customer Terms will be updated to state the threshold and the notice sequence before it takes effect.
3. Post-Termination Export Window
After termination or expiry, Customer Data remains available for export for thirty (30) calendar days. Tauri Pro will send a notice at the start of the window and seven (7) days before it closes. At the end, production data is deleted; encrypted backup copies may remain until normal snapshot expiry. Customer is responsible for completing export within the window.
4. Customer-Requested Deletion
4.1 Organization Deletion
An authorized Organization Director may request deletion. Tauri Pro will verify authority, identify legal holds, notify the requestor of an export period of at least seven (7) days unless waived in writing, and confirm scope and timing. Executed deletion is irreversible.
4.2 Individual User Deletion
Administrators may remove Users. Personal profile data will be deleted or anonymized within thirty (30) days. Business records may be retained for continuity, audit, or legal purposes and attributed to the organization where feasible. If the removed User is the sole Organization Director, Tauri Pro will contact the registered administrator before proceeding.
5. AI Feature Input and Output
AI Input is handled according to the AI Feature Terms, DPA, and current sub-processor list. Tauri Pro does not use Customer AI Input or output to train models without prior written consent. AI data follows the same account inactivity and post-termination lifecycle as other Customer Data, subject to disclosed provider retention.
6. Backup and Legally Required Retention
6.1 Encrypted Backups
Deleted production data may remain in encrypted, access-controlled backup snapshots for the limited rolling period configured in Tauri Pro’s active infrastructure. Backups are used only for disaster recovery, are not restored to reverse intentional Customer deletion, and expire automatically.
6.2 Legal Retention
Billing, invoice, tax, fraud-prevention, security-incident, access-log, litigation-hold, and regulatory records may be retained for the period required by applicable Finnish or other governing law. Such data is access-restricted, used only for the required purpose, and deleted when the obligation expires.
7. Data Export
During an active subscription or Export Window, Customer may use export formats and APIs made available by its subscription plan. File attachments are exported in their available original format. Tauri Pro will reasonably assist Organization Directors. Customer is responsible for downloading and securely storing exports before deletion deadlines.
8. Effect of Deletion
Permanent deletion removes strategic goals, portfolios, projects, tasks, files, timesheets, resource records, budgets, configurations, custom fields, workflows, User accounts, roles, memberships, invitations, integrations, and API credentials from production systems, subject to retained business records and backup expiry. Deletion is irreversible.
9. Requests and Contact
Deletion, retention, export, and legal-hold requests should be sent to office@tauri.pro. Tauri Pro aims to acknowledge requests within five (5) business days. Privacy rights requests are handled under the Privacy Policy and DPA.