Data Retention Policy
How long each category of data is kept, and why.
Company: EcomSarthi Business Solutions LLP ("EcomSarthi", "we", "us", "our")
Product: Ecom10x — One Dashboard. Every Marketplace. (the "Platform" or "Service")
Effective Date: [EFFECTIVE_DATE — e.g., 1 August 2026] · Version: [VERSION — e.g., 1.0] · Next Review: [NEXT_REVIEW_DATE — e.g., 1 February 2027]
1. Principles
We retain data only as long as needed for the purposes described in the Privacy Policy, to comply with Indian law, or to resolve disputes — whichever is longest for the specific category. Retention is reviewed at least annually (next review: [NEXT_REVIEW_DATE — e.g., 1 February 2027]).
2. Retention Schedule
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & profile data | Life of account + 90 days | Service provision, wind-down |
| OAuth / access / refresh tokens | Until disconnect or expiry; deleted within 24 hours of disconnect | Security, marketplace policy |
| Marketplace Data (orders, inventory, listings, shipments, returns, settlements) | Life of account, or earlier deletion on request | Service provision; your tax/reconciliation needs |
| Invoices & billing records | 8 years | Companies/LLP and tax law requirements |
| GST-relevant records | As mandated by GST law (currently up to 72 months from annual return due date, longer if proceedings pending) | Legal obligation |
| Security & audit logs | 12 months rolling (extended if under investigation) | Security, fraud prevention, legal defence |
| Support communications | 24 months after ticket closure | Support quality, dispute resolution |
| Usage analytics (identifiable) | 12 months, then aggregated/anonymised | Product improvement |
| Backups | Encrypted, rotated; maximum 90 days | Disaster recovery |
| Marketing/lead data (non-customers) | 12 months from last interaction or until opt-out | Communication preferences |
3. Marketplace-Mandated Retention Limits
Where a Marketplace developer policy imposes shorter maximum retention for specific data classes (for example, buyer personally identifiable information under Amazon SP-API data protection requirements), the shorter marketplace-mandated period prevails, and we delete or de-identify accordingly.
4. End-of-Retention Handling
At the end of a retention period data is deleted or irreversibly anonymised per the Data Deletion Policy. Legal holds suspend deletion for affected records until the hold is lifted.
5. Your Controls
You may delete datasets earlier via in-product controls or by request to [PRIVACY_EMAIL — e.g., privacy@ecom10x.in], subject to legal retention duties, and may export data at any time per the Data Export Policy.
Governing Law & Dispute Resolution
This document is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, without regard to conflict-of-law principles.
Any dispute arising out of or in connection with this document shall first be attempted to be resolved amicably through good-faith negotiation within thirty (30) days of written notice. Failing amicable resolution, the dispute shall be referred to arbitration by a sole arbitrator appointed in accordance with the Arbitration and Conciliation Act, 1996. The seat and venue of arbitration shall be [JURISDICTION_CITY — e.g., New Delhi], India, and proceedings shall be conducted in English. Subject to the foregoing, the courts at [JURISDICTION_CITY — e.g., New Delhi], India shall have exclusive jurisdiction.
Contact
EcomSarthi Business Solutions LLP
[REGISTERED_OFFICE_ADDRESS OF ECOMSARTHI BUSINESS SOLUTIONS LLP]
Support: [SUPPORT_EMAIL — e.g., support@ecom10x.in] · Legal: [LEGAL_EMAIL — e.g., legal@ecom10x.in] · Phone: [SUPPORT_PHONE_NUMBER]