Data Retention and Deletion Rules

1. Inactive new organizations

An organization is considered inactive when no User signs in and no portfolio, project, time, resource or configuration activity is recorded for six consecutive months. Tauri Pro may schedule the entire organization for deletion.

2. Notice sequence

• Email notice to Organization Directors before scheduled deletion.
• A reasonable reactivation and export period, proposed as 30 days.
• Cancellation of deletion if an authorized User signs in or requests retention during the notice period.

3. Customer-requested deletion

An authorized Organization Director may request deletion. Tauri Pro should verify authority, identify legal holds and offer an export before irreversible deletion.

4. User deletion

Organization administrators may remove a Tauri User. The organization may retain business records created by that User where needed for continuity, audit or legal obligations, while personal profile data is removed or minimized.

5. Backups and legal retention

Deleted production data may remain in encrypted backups for a limited rolling period before automatic expiry. Billing, tax, fraud-prevention and security records may be retained where law requires. Final durations must match the actual infrastructure.

6. Effect of deletion

Deletion removes access to projects, portfolios, files, timesheets, resource records, configurations and organization memberships. Customers are responsible for exporting required data before the deadline.