DRAFT — for legal review. Not in effect. The whole document must be reviewed by counsel before publication.
EZbudget Data Retention and Deletion Policy
Effective date: October 16, 2026 Website: https://ezbudget.setitsolutions.com
This policy explains how long STEL Group LLC ("we") keeps EZbudget data and how it is deleted. It supplements our Privacy Policy. Our principle is to keep the minimum data needed, for the shortest reasonable time.
1. Retention schedule
| Data | Retained | Then |
|---|---|---|
| Account profile (name, email, preferences) | While your account is active | Deleted within 30 days of account deletion |
| Connected-account data (account names, last 4, balances, transactions) | While the connection and account are active | Deleted within 30 days of disconnection (if you choose to remove history) or of account deletion |
| Bank-connection access tokens | While the connection is active | Revoked with the provider and destroyed immediately on disconnect or deletion |
| Manual entries, budgets, categories, alert rules, notes, imported CSV contents | While your account is active | Deleted within 30 days of account deletion |
| Uploaded CSV files (raw) | Up to 7 days after import | Deleted after processing |
| Alert delivery records (which alerts were sent) | 13 months | Deleted |
| Security and audit logs (sign-ins, MFA, account changes) | 12 months | Deleted, or kept longer only if tied to an active investigation |
| Application/server logs (no financial details) | 30 days | Deleted |
| Billing records (invoices, payments, tax data) | As required by law, generally up to 7 years | Deleted |
| Marketing consent records | While consent is active + 3 years | Deleted |
| Waitlist entries (no account created) | Until launch + 12 months, or until you unsubscribe | Deleted |
| Support conversations | 24 months | Deleted |
| Encrypted backups | Rolling, up to 35 days | Expire automatically |
| Aggregated or de-identified statistics | Indefinitely | Not linkable to you |
2. Inactive and dormant accounts
- Connections needing re-login for more than 30 days: we notify you, then disconnect the connection with the provider. Your history stays unless you delete it.
- Free accounts inactive for 24 months: we email you at least 30 days in advance, then delete the account if you don't sign in.
3. How to delete your data
- Delete everything: Settings → Account → Delete account. You must re-authenticate, including multi-factor authentication. Or email support@setitsolutions.com.
- Disconnect one institution: Settings → Connections. You can choose to keep or delete its history.
- Plaid access: you can also review and revoke Plaid's access at https://my.plaid.com. Plaid handles data it holds under the Plaid End User Privacy Policy (https://plaid.com/legal/#end-user-privacy-policy).
- Export first: Settings → Privacy → Export (CSV/JSON).
4. What happens when you delete your account
- Your session is ended and sign-in is disabled immediately.
- Each bank connection is removed with its provider: Plaid
/item/remove, or Stripe Financial Connections disconnect. Access tokens are destroyed. - Any active subscription is canceled. Stripe keeps billing records under its own obligations.
- Your personal and financial data is deleted from production systems within 30 days.
- Backups containing your data expire within 35 days of deletion.
- You receive an email confirming deletion. We keep only the records listed in Section 1 that the law requires, plus a minimal suppression record (a hashed email) so we don't email you again.
5. Exceptions
We may keep specific data longer when required by law, to resolve disputes, to enforce our agreements, or to prevent fraud or abuse. If so, we keep only what is needed, and only as long as needed.
6. Internal controls
- Retention periods are enforced by automated jobs and reviewed at least annually.
- Deletion requests and their completion are logged, without retaining the deleted content.
- Our service providers (hosting, email, monitoring) are contractually required to delete or return data when no longer needed.
[Counsel: confirm periods against GLBA Safeguards Rule disposal requirements (generally disposal within two years of last use, unless needed for business or legal purposes), state laws, and tax recordkeeping.]
7. Contact
STEL Group LLC · 336 E University Pkwy #1113, Orem, UT 84058 · support@setitsolutions.com