Data Retention and Deletion Policy
How long Indoria Office keeps each kind of data
Template - not legal advice. This document was drafted for Indoria Technologies Private Limited to match how the software actually works. Company details are filled in. Have an advocate in India review it before launch, especially the Digital Personal Data Protection Act 2023 sections, the handling of students under 18, and the limitation of liability.
| Data | Kept for | How it is deleted |
|---|---|---|
| User account | Until the user or organisation deletes it | Immediate removal of the record, tokens and sessions |
| Files in use | Until deleted by the owner | Moved to trash |
| Trash | 30 days | Automatic hourly clean-up removes file, versions and blobs |
| Older file versions | Last 10 versions per file | Oldest removed on each save |
| Sessions | Up to 30 days | Automatic clean-up of expired sessions |
| Verification / reset / invite tokens | 3 days / 1 hour / 7 days | Automatic clean-up |
| Audit records | Life of the organisation | Removed with the organisation; person's name and IP removed on account deletion |
| Usage counts | 400 days | Automatic clean-up |
| E-mail outbox (only without SMTP) | 30 days | Automatic clean-up |
| Backups | The last 14 nightly snapshots by default (up to 14 days) | Rotated and overwritten |
| Backup and export files a customer downloads | Held by the customer, not by Indoria | The customer deletes them |
| Offline sales waiting on a device | Until accepted by the server, then removed | Automatic once sent; clearing browser data removes unsent sales |
| Organisation after it ends | 30 days to export, then deleted | Platform operator deletes organisation; blobs removed from disk |
When the law requires longer retention (for example tax records for invoices), those records are kept separately for the required period only.
Addendum: signing data (1.3)
| Data | Kept for |
|---|---|
| Signature and stamp pictures | Until the user deletes them or the account is deleted |
| Signature requests and signer details | 90 days after completion or expiry; unfinished drafts 7 days |
| Seal records (hash, signers, time) | As long as the sealed file exists, so verification keeps working |
| Sealed PDF | In the owner's Drive until the owner deletes it |