Data Retention & Deletion Policy

Retention Principles

CandidateSeekers retains user data only for as long as necessary to fulfill the purposes for which it was collected, including providing our services, complying with legal obligations, and resolving disputes.

Retention Schedules

• Active Accounts: Profile data, job history, and preferences are retained indefinitely while the account is active to provide the service.
• Deleted Accounts: Upon request for account deletion, personal identifiers are removed from our production database within 30 days.
• Logs & Analytics: System logs and analytical data are retained for 90 days for security auditing and performance monitoring, then rotated or deleted.
• Backups: Database backups are retained for 30 days by our provider (Supabase) for disaster recovery purposes.

Data Deletion Requests

Users may request full data deletion at any time via the "Delete Account" option in their settings or by contacting support@candidateseekers.com.

Process:

1. User initiates request.
2. System soft-deletes the record (making it inaccessible).
3. Hard deletion script runs within 30 days to permanently purge data.

Exceptions

We may retain certain transaction data (e.g., Stripe payment records) for tax and accounting purposes as required by law (typically 7 years).