Legal
Data Retention Policy
This policy explains how long Yenvora generally keeps different categories of data. Retention may vary when a customer configures shorter periods, requests deletion, has a legal obligation, or where we must preserve information for security, fraud prevention, dispute resolution, or legal compliance.
| Data category | Typical retention | Reason |
|---|---|---|
| Workspace account data | For the life of the workspace, then deleted or anonymized after closure unless retention is required. | Account administration, access control, billing, security, and support. |
| Customer conversations and contacts | For the life of the workspace or until the customer deletes or requests deletion. | Conversation history, customer support workflows, reporting, and business records controlled by the customer. |
| WhatsApp Business and Meta integration data | For as long as the integration remains connected, then deleted when disconnected or when the workspace is deleted, subject to backup and legal retention. | Operating WABA accounts, phone numbers, templates, delivery events, and webhooks. |
| Access tokens and credentials | Until rotated, revoked, disconnected, expired, or deleted with the workspace. | Secure operation of customer-authorized integrations. |
| Webhook and event logs | Generally retained only as needed for operational debugging, security, and audit purposes. | Reliability, troubleshooting, abuse prevention, and delivery diagnostics. |
| Application logs and security logs | Generally retained for a limited operational period unless needed for investigation or compliance. | Security monitoring, fraud prevention, incident response, and platform reliability. |
| Database backups | Production database backups are currently retained for 14 days. | Disaster recovery and service continuity. |
| Support communications | For as long as needed to provide support and maintain business records. | Customer support, account history, and dispute resolution. |
Deletion From Backups
When data is deleted from the active service, it may remain in encrypted or access-controlled backups until those backups expire through the normal backup cycle. Current production database backups are retained for 14 days.
Customer-Controlled Data
For customer conversation data, Yenvora usually acts as a processor. The business using Yenvora controls retention choices for its contacts, conversations, and connected channel data, subject to the capabilities available in the product and applicable law.
Legal Holds
We may preserve data for longer where required by law, court order, regulatory request, security investigation, fraud prevention, dispute resolution, or enforcement of our agreements.
Questions
Contact privacy@yenvora.com with retention questions.