Vibe Check Data Deletion And Retention Policy
Last Updated: [EFFECTIVE DATE]
This Data Deletion and Retention Policy (this "Deletion Policy") describes how a user of Vibe Check (the "Service") may delete Personal Information held by Tailored Surveys, Inc. ("Tailored Surveys," "we," "us," or "our"), what is and is not deleted, and how long we retain each category of information. Capitalized terms used but not defined in this Deletion Policy have the meanings given to them in the Vibe Check Privacy Policy at https://vibes.tailoredsurveys.com/privacy.
1.HOW TO DELETE YOUR INFORMATION.
1.1Self-Service Deletion of Your Account. Sign in to the Service, open https://vibes.tailoredsurveys.com/delete, and confirm your password. Deletion takes effect immediately, does not require our review or approval, and cannot be reversed.
1.2Deletion of Political Items Only. To delete only your Sensitive Personal Information, open https://vibes.tailoredsurveys.com/consent, clear the control concerning political questions, and submit the form. We then delete your Survey Responses and Agent Predictions concerning the Political Items and cease presenting those items to you and your Agent.
1.3Deletion by Request. If you cannot sign in, email [PRIVACY CONTACT EMAIL] from the email address associated with your account and state that you wish to delete your account. We will verify the request by confirming control of that address and will complete the deletion without undue delay and in any event within thirty (30) days of verification.
1.4Disconnecting an Agent. Disconnecting the Vibe Check connector within your Agent Platform, or revoking a credential on your account page, terminates the Agent's access to the Service but does not delete information we already hold. To delete that information, follow Section 1.1.
1.5No Fee. We do not charge a fee for any deletion.
2.WHAT IS DELETED.
2.1Account Deletion. Upon deletion of your account we delete from our production systems: (a) your Account Information, including your email address and hashed password; (b) all Consent Records; (c) all Survey Responses; (d) all Agent Predictions; (e) all sessions and Results; and (f) all API Keys, access tokens, refresh tokens, and authorization codes, each of which ceases to function immediately.
2.2Backups. Deleted information may persist in encrypted backups for up to thirty-five (35) days, after which the backups expire. We do not restore deleted accounts from backup and do not use backed-up information for any purpose other than disaster recovery.
2.3Technical Logs. Request logs that contain Internet Protocol addresses are not keyed to your account and expire on the schedule in Section 4.
3.WHAT IS NOT DELETED.
3.1Deletion Record. We retain a record that an account was deleted and the time of deletion. The record contains an internal numeric identifier that no longer corresponds to any account and contains no Personal Information.
3.2De-Identified and Aggregated Information. We do not withdraw or alter De-Identified Information or aggregated information, such as published statistics, created before the deletion, because it cannot reasonably be associated with you.
3.3Information Held by an Agent Platform. If you consented to the disclosure of your individual Survey Responses to your Agent, or if your Agent otherwise retained Results it received from the Service, that information is held by the provider of your Agent Platform and is outside our control. To delete it, use the deletion and memory controls offered by that provider.
3.4Legal Holds. We may retain specific information for longer than stated in this Deletion Policy where necessary to comply with applicable law, valid legal process, or the establishment, exercise, or defense of legal claims, and only for so long as that necessity continues.
4.RETENTION SCHEDULE. Subject to Section 3.4, we retain information for the following periods:
| Category | Retention Period | Trigger for Deletion |
|---|---|---|
| Account Information | Life of the account | Account deletion, or 24 months of inactivity |
| Consent Records | Life of the account | Account deletion, or 24 months of inactivity |
| Survey Responses and Agent Predictions (non-political) | Life of the account | Account deletion, or 24 months of inactivity |
| Survey Responses and Agent Predictions (Political Items) | Until consent is withdrawn, and in any event no longer than the life of the account | Withdrawal of consent, account deletion, or 24 months of inactivity |
| Hashed credentials | Until revoked or expired, and in any event no longer than the life of the account | Revocation, expiry, or account deletion |
| Authorization codes | 10 minutes | Expiry |
| Technical logs | 30 days | Expiry |
| Backups | 35 days | Expiry |
| Deletion records; De-Identified Information | Indefinite | Not applicable |
5.INACTIVE ACCOUNTS. If you do not sign in to your account for twenty-four (24) consecutive months, we will delete your account in accordance with Section 2.1 or convert the associated information to De-Identified Information. We will attempt to notify you by email at least thirty (30) days in advance.
6.CONTACT. Questions concerning this Deletion Policy may be directed to [PRIVACY CONTACT EMAIL].