Last updated: August 2026
1.Chapter I: General Provisions
Article (1) Purpose and Scope
This Policy sets out the periods for which the Company retains different categories of data and the mechanism for their deletion, supplementing what is stated in general terms in the Terms and Conditions and the Data Processing Agreement.
2.Chapter II: Retention Schedule by Data Type
Article (2) Retention Periods
| Data Category | During Active Subscription | After Subscription Termination |
|---|---|---|
| Account data (name, email, phone) | For the duration of the subscription | Export window of 30 days, then deletion within 90 days |
| Firm client data (CRM, financial and tax records) | For the duration of the subscription | Export window of 30 days, then deletion within 90 days |
| Attendance, leave, and HR records | For the duration of the subscription | Export window of 30 days, then deletion within 90 days |
| Security activity logs | 12 months on a rolling basis | Deletion within 90 days of subscription termination |
| Backups | Daily cycle, retained for 30 days | Deletion within 30 additional days after deletion of live data (maximum 120 days from termination) |
| Company billing and internal accounting data | — | Retained for 5 years in accordance with Egyptian tax and accounting law requirements |
Article (3) Mandatory Retention Under Law
Where applicable law requires the Company to retain a particular category of data for longer than the periods set out above, that data shall be retained solely for the mandatory legal period and its processing shall be restricted to that purpose only.
Article (3 bis) Suspension of Deletion for Legal Reasons (Legal Hold)
By way of exception to the periods set out in this Policy, the Company may suspend the deletion of any data, in whole or in part, where this is necessary by reason of: an order or judgment issued by a competent judicial authority; a legal dispute that is ongoing or reasonably anticipated in connection with that data; a formal investigation by a competent regulatory or governmental authority; or any other legal obligation requiring retention of the data. The suspension shall be limited to the minimum necessary data and for the minimum period necessary to achieve the purpose requiring it, and standard deletion procedures shall resume as soon as the reason for the suspension ceases to apply. The Company undertakes to notify the User of the occurrence of a suspension unless expressly prohibited from doing so by a legal non-disclosure order.
3.Chapter III: Deletion Procedures
Article (4) Permanent Deletion
"Permanent Deletion" means the removal of data from live systems and backups in a manner that is irreversible, such that the data cannot be recovered by technical means available to the Company.
Article (5) Early Deletion Requests
The User or data subject may request deletion of their data before the default periods above expire, in accordance with the rights set out in the Privacy Policy, unless doing so would conflict with a legal obligation to retain the data.