Data retention and deletion

Policy principles

• Collect only information used for a documented business purpose.
• Do not keep an active financial connection after it is no longer needed.
• Retain accounting evidence long enough to support tax filings, audits, property basis, and legal obligations.
• Delete eligible records securely and record the completed action.

Retention schedule

• Plaid connection credentials: retained only while the connection is active. After a verified disconnection request, the Item is revoked and the durable access token is removed or rendered unusable as soon as operationally practical and no later than 30 days.
• Bank transactions, balances, receipts, statements, accounting records, and audit evidence: generally retained for seven years after the later of the relevant tax filing or its due date.
• Property acquisition, basis, capital-improvement, depreciation, and disposition records: retained while the property is owned and for seven years after disposition and the related tax filing.
• User and access records: retained while access is active and afterward as needed to document authorization, security events, and completed deletion requests.
• Temporary processing data: retained only as needed to complete, troubleshoot, or secure an upload, extraction, email intake, or bank synchronization process.

Disconnecting a financial institution

A verified owner may request disconnection at any time. The security owner revokes the Plaid Item, disables future synchronization, and removes the stored access credential. Historical transaction evidence is evaluated separately under the accounting and tax retention schedule; disconnection does not silently rewrite previously reviewed books.

Deletion procedure

1. Verify the requester and the affected business workspace.
2. Identify active connections, records, documents, audit history, backups, and any legal or tax hold.
3. Revoke active provider access and stop future collection.
4. Delete or irreversibly redact eligible primary records and private objects through a controlled administrator process.
5. Record the scope, authority, date, and result of the deletion.
6. Allow residual provider backups to age out under the provider's protected backup lifecycle.

Exceptions

Records may be retained beyond the standard schedule for an active audit, tax examination, dispute, legal hold, fraud or security investigation, contractual obligation, or another documented business requirement. The reason and review date must be recorded. Retention resumes only for as long as the exception remains necessary.

Review and requests

The owner reviews this schedule and retained data at least annually. Access, disconnection, correction, export, and deletion requests may be sent to doehrman@gmail.com. A verified request is acknowledged promptly and ordinarily completed within 30 days unless a documented exception applies.