Bodhi
PrivacyTermsBack
DATA LIFECYCLE

Data Retention and Deletion Policy

Purpose-based retention, controlled export, verified deletion and truthful exceptions.

Version2026-08-16-draft.1DefaultNo one-size-fits-all periodStatusDraft

1. Principles

Retention depends on purpose, engagement terms, statutory/professional obligations, security, disputes and customer instruction. Bodhi must not promise immediate universal deletion where an immutable audit record, legal hold or required professional record applies.

2. Lifecycle table

RecordTypical lifecycleDeletion control
Account/profileAccount life plus lawful closure/security periodVerified closure request
Books/statutory evidenceCustomer-configured period consistent with applicable law and engagementPartner/admin approval; legal-hold check
AI prompts/outputsMinimised task/audit period; provider policy also appliesTenant policy and provider deletion
Raw voice audioDiscard after transcription unless explicit retention is requiredAutomatic expiry
Security/audit eventsRisk and legal periodRestricted lifecycle job
BackupsRotating recovery windowExpiry; not selectively altered
Legal acceptanceAgreement/dispute evidence periodPreserved even after account closure where lawful
Offline draftUntil sync, user deletion or logoutBrowser/IndexedDB purge

3. Deletion requests

Requests require identity, tenant and authority verification. Client-data requests may be referred to the controlling firm/business. Before tenant deletion, authorised users should export required data and resolve active holds, invoices, engagements and provider jobs.

4. Deletion process

Deletion may include disabling active access, scheduling database/object deletion, revoking credentials, provider deletion and expiry from backups. Status must distinguish requested, verified, blocked, processing and complete. We will not claim completion merely because a UI record disappeared.

5. Holds and exceptions

Fraud/security investigation, dispute, court/government direction, tax/accounting retention or professional audit documentation may delay deletion. Access remains restricted and the reason is recorded.

6. Account closure and portability

Available exports may include CSV, XLSX, PDF, JSON and documented connector formats. Availability does not guarantee compatibility with every third-party version. Proprietary Tally backups are not reverse engineered.

7. Configuration pending

Production retention schedules require owner and professional review for each data class. Until configured, public signup remains blocked rather than presenting invented retention periods.

Bodhi · Retain for purpose; delete with proof