1. Principles
Retention depends on purpose, engagement terms, statutory/professional obligations, security, disputes and customer instruction. Bodhi must not promise immediate universal deletion where an immutable audit record, legal hold or required professional record applies.
2. Lifecycle table
| Record | Typical lifecycle | Deletion control |
|---|---|---|
| Account/profile | Account life plus lawful closure/security period | Verified closure request |
| Books/statutory evidence | Customer-configured period consistent with applicable law and engagement | Partner/admin approval; legal-hold check |
| AI prompts/outputs | Minimised task/audit period; provider policy also applies | Tenant policy and provider deletion |
| Raw voice audio | Discard after transcription unless explicit retention is required | Automatic expiry |
| Security/audit events | Risk and legal period | Restricted lifecycle job |
| Backups | Rotating recovery window | Expiry; not selectively altered |
| Legal acceptance | Agreement/dispute evidence period | Preserved even after account closure where lawful |
| Offline draft | Until sync, user deletion or logout | Browser/IndexedDB purge |
3. Deletion requests
Requests require identity, tenant and authority verification. Client-data requests may be referred to the controlling firm/business. Before tenant deletion, authorised users should export required data and resolve active holds, invoices, engagements and provider jobs.
4. Deletion process
Deletion may include disabling active access, scheduling database/object deletion, revoking credentials, provider deletion and expiry from backups. Status must distinguish requested, verified, blocked, processing and complete. We will not claim completion merely because a UI record disappeared.
5. Holds and exceptions
Fraud/security investigation, dispute, court/government direction, tax/accounting retention or professional audit documentation may delay deletion. Access remains restricted and the reason is recorded.
6. Account closure and portability
Available exports may include CSV, XLSX, PDF, JSON and documented connector formats. Availability does not guarantee compatibility with every third-party version. Proprietary Tally backups are not reverse engineered.
7. Configuration pending
Production retention schedules require owner and professional review for each data class. Until configured, public signup remains blocked rather than presenting invented retention periods.