Ertzyx

Data Retention Policy

Last updated: 25 March 2026 · Effective: 25 March 2026

This Data Retention Policy describes how long Ertzyx retains different categories of personal data, and the procedures for deletion and anonymisation. This policy applies to all data processed by Ertzyx at ledger.ertzyx.com.

1. Principles

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

Providing the services you have requested
Complying with legal, regulatory, and contractual obligations
Resolving disputes and enforcing our agreements
Maintaining the integrity and permanence of verified achievement records

2. Retention Schedule

Data Category	Retention Period	Basis
Account information (name, email)	Duration of account + 30 days after deletion	Contract performance
Achievement records (active)	Duration of account	Contract performance
Verified achievement records	Duration of account + 7 years after deletion	Legitimate interests (record integrity)
Uploaded media files	Duration of account + 30 days after deletion	Contract performance
Verification history	Duration of account + 7 years	Legitimate interests / Legal obligation
Payment records	7 years from transaction date	Legal obligation (tax/accounting)
Contact form submissions	2 years from submission	Legitimate interests
Session and usage logs	90 days	Security / Legitimate interests
Authentication logs	1 year	Security / Legal obligation
Waitlist submissions	Until pilot launch + 1 year	Consent
Cookie consent records	2 years	Legal obligation (GDPR)
Anonymised analytics data	Indefinite (no personal data)	Legitimate interests

3. Verified Records — Special Consideration

Ertzyx's core purpose is the permanent preservation of verified achievement records. Because of this:

Verified records that have been made public and shared via credential links may remain accessible for a transition period after account deletion to protect the interests of third parties who have relied on those records
The verification metadata (institution name, date, verification reference) may be retained in anonymised form to maintain the integrity of the verification chain
You will be informed of this at the time of account deletion

4. Account Deletion Process

When you delete your account:

Immediate: Your account is deactivated and you lose access to the Platform
Within 30 days: Your personal profile data, unverified achievements, and uploaded media are permanently deleted from our active systems
Within 90 days: Your data is purged from all backup systems
Retained: Payment records (7 years), verified achievement metadata (7 years, anonymised where possible), and any data required for legal compliance

To request account deletion: Settings → Account → Delete Account, or email support@ertzyx.com.

5. Data Stored by Third-Party Processors

Supabase

Database and file storage. Data is retained on Supabase infrastructure in accordance with our deletion requests. Supabase retains backups for up to 30 days. See Supabase Privacy Policy.

Stripe

Payment processing. Stripe retains transaction records for 7 years for financial compliance. See Stripe Privacy Policy.

6. Your Rights

You have the right to request deletion of your personal data at any time, subject to the exceptions described in this policy. You also have the right to request a copy of all data we hold about you. To exercise these rights, contact support@ertzyx.com. We will respond within 30 days.

7. Changes to This Policy

We may update this Data Retention Policy from time to time. Changes will be communicated via email or a notice on the Platform. Continued use of Ertzyx after changes constitutes acceptance.

8. Contact

Ertzyx Data Team

Email: support@ertzyx.com

Platform: ledger.ertzyx.com