Data Retention Policy

1. Purpose & Scope

This Data Retention Policy applies to all information collected through our website, client onboarding, project management systems, email communications, and payment processing. It is designed to comply with applicable data protection regulations including GDPR, CCPA, and other relevant jurisdictional requirements.

2. Data We Collect

We collect and process the following categories of data:

• Identity Data: Name, company name, job title, and contact information.
• Communication Data: Email correspondence, project feedback, and support requests.
• Transaction Data: Invoice records, payment details (processed securely via third-party providers), and subscription history.
• Technical Data: IP addresses, browser type, device information, and usage logs for site security and performance.
• Project Assets: Uploaded design files, brand guidelines, and delivered icon packages.

3. Retention Periods

We retain your data only for as long as necessary to fulfill the purposes for which it was collected, meet legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are outlined below:

Data Category	Retention Period	Reason
Client Account & Project Files	Active period + 24 months after completion	Service delivery, revisions, and client access
Payment & Financial Records	7 years	Tax compliance and accounting regulations
Email Communications	12 months after correspondence ends	Customer support and legal reference
Marketing & Newsletter Data	Until unsubscribed or 24 months of inactivity	Direct marketing compliance
Website Analytics & Logs	14 months	Security, performance optimization, and analytics
Legal & Contractual Records	Duration of relationship + 6 years	Contract enforcement and dispute resolution

4. Storage & Security

All data is stored on secure, encrypted servers located in compliance with international data protection standards. We implement industry-standard security measures including:

• End-to-end encryption for file uploads and downloads
• Role-based access controls for employee data handling
• Regular security audits and vulnerability assessments
• Automated backups with geographic redundancy

5. Your Rights & Deletion Requests

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data
• Request data portability in a machine-readable format
• Object to or restrict certain data processing activities
• Withdraw consent for marketing communications at any time

To exercise these rights or request the deletion of your data before the standard retention period expires, please contact our Data Protection Officer at privacy@apptouchicon.com. We will respond within 30 days and verify your identity before processing any request.

Important: Certain data may be retained longer if required by law, pending legal disputes, or for legitimate business interests such as fraud prevention and system integrity.

6. Policy Updates

We may update this Data Retention Policy to reflect changes in our practices, technology, or legal requirements. Significant changes will be communicated via email or prominent notice on our website. The "Last Updated" date at the top of this page will reflect the most recent revisions.

7. Contact Information

For questions about this policy, data retention practices, or to submit a data request:

Apple Touch Icon.png
Data Protection Officer
Email: privacy@apptouchicon.com
Address: San Francisco, CA 94103, USA
Phone: +1 (800) 555-1234