Data Retention and Deletion Policy

1. Active accounts

Account, customer-entered portfolio, entitlement, and operational information is retained while the account is active and as needed to provide and secure the service. Billing and transaction records may be kept longer when needed for accounting, fraud prevention, disputes, tax, or legal obligations.

2. Voluntary cancellation

Canceling a subscription does not delete the account. Paid dashboard access ends after the current trial or paid period, but account and customer data remain until resubscription or an explicit account-deletion request.

3. Account deletion and recovery

An account-deletion request requires recent authentication and explicit confirmation. It immediately revokes active sessions, removes product entitlement, and cancels the subscription. Active user data is held in a restricted recovery state for 30 days. During that window, the customer may reverse deletion through the limited recovery experience.

After 30 days, active user data and the authentication identity are permanently deleted, subject to backup expiry and legal retention exceptions. No downloadable archive is generated. Reversal after permanent deletion is not available.

4. Trial eligibility record

To enforce one trial per customer, SWB Technologies retains a one-way identifier derived from the normalized account email after permanent deletion. It is used only to prevent repeat trials and is not intended to reconstruct the email or contact the former customer. A former customer may create a new empty account but remains ineligible for another free trial.

5. Downgrade quarantine

When a downgrade exceeds the lower plan’s limits, unselected household, individual, or model data is quarantined for 90 days. It is inaccessible in the lower tier, can be restored by upgrading during the window, and is permanently deleted at the end of the window subject to backup expiry. SWB Technologies sends lifecycle notices when scheduled, effective, and approaching deletion.

6. Failed-payment hold

A failed renewal receives seven days of full-access recovery. If payment remains unresolved, the subscription is canceled and data enters a 30-day recovery hold before permanent deletion, subject to successful payment, backup expiry, and legal retention exceptions.

7. Backups

Managed database backups have a seven-day daily history and are the sole database-backup system. Deleted or quarantined data may remain in those rotating backups until expiry. Backups are for disaster recovery, are access-restricted, and are not used to restore an individual deleted account into the active service.

8. Support, security, and legal records

Support messages, security records, refund decisions, and billing records are retained only as reasonably needed for support, fraud prevention, dispute resolution, accounting, enforcement, and legal obligations, then deleted or de-identified. Automatic-renewal consent evidence is retained for at least three years or one year after the related contract ends, whichever is longer, as required for covered California contracts. Questions or deletion requests may be sent to support@financialportfoliomanager.com.