This policy defines how long Gamma Trade retains different categories of data and what happens when you (or we) close an account. It complements our Privacy Policy and Information Security Policy.
1. Retention Schedule
2. Account Deletion
You can request deletion at any time by:
- Clicking "Delete Account" in account settings (when available), or
- Emailing support@gextrade.fyi from your registered email address.
What happens on deletion:
- Within 24 hours: all production records (saved analyses, watchlists, alerts, plans, push subscriptions) are removed from active systems.
- Within 30 days: the account record itself (email, password hash, profile fields) is deleted, with the exception of:
- — Billing & tax records (retained 7 years per US IRS / Stripe requirements).
- — Logs strictly necessary for fraud / abuse investigations (90-day cap).
- Within 60 days: all backup copies containing your data have rotated out of the 30-day backup window.
3. Data Export
Before deletion, you may request a portable JSON export of your account data (saved analyses, plans, alerts). We deliver the export within 14 days of the request.
4. Inactive Accounts
Free-tier accounts with no sign-in activity for 24 months may be archived. We send a warning email at 23 months. Archive = move data to encrypted cold storage; restore on request within 48 hours. After 36 months of inactivity we proceed with full deletion (subject to legal retention obligations).
5. Sub-processor Data Deletion
When you delete your account we instruct each sub-processor that retains your data to remove it on their next scheduled deletion cycle:
- Stripe — customer record retained per their own retention policy (typically 7 years).
- Resend — email-event logs retained 90 days then deleted.
- Plaid — access tokens revoked on disconnect; Plaid retains its own logs per its policy.
- MongoDB Atlas — application records are deleted by us; Atlas keeps backups within our 30-day backup window only.
6. Legal Hold
Notwithstanding the schedule above, we may retain specific records longer if required for an ongoing legal claim, regulatory inquiry, or to detect & prevent fraud.
7. Changes
We will update the "Last updated" date above whenever this policy materially changes.