Data Retention and Deletion Policy

This policy describes the retention and deletion standards for TradeMaker paper-trading accounts, workspace content, billing records, security logs, and support communications. It applies to customer personal information and tenant data processed in the service.

Active account and workspace information is retained while your account or paid workspace remains active. After a verified deletion request or account closure, we target deletion of active workspace content and account profile data within 30 days, subject to the exceptions below.

We retain security, authentication, and immutable audit records for up to 24 months to investigate abuse, preserve account integrity, and meet security obligations. We retain invoices, payment status, refund decisions, and related tax/accounting records for up to seven years, or longer if law requires. Encrypted backup copies are retained for no more than 35 days before rotation, unless an incident, legal hold, or documented recovery need requires a longer period.

You may request deletion by contacting the privacy contact below from the verified email address associated with the account. We will verify identity and authority, confirm the request, and delete or de-identify eligible information. Deletion is irreversible once completed. We may ask you to export information before closure; you remain responsible for preserving anything you need.

We will not delete information that we must retain to comply with law, collect amounts owed, resolve a dispute, enforce an agreement, prevent fraud or abuse, maintain security logs, or preserve an active legal hold. Retained information will be isolated from ordinary product use and deleted when the applicable retention purpose ends.

Deleting a customer account removes its active tenant data from the production service according to the deletion process above. Backup copies are not ordinarily edited individually; they expire through the documented backup rotation cycle. If a backup is restored, deletion requests recorded before the restore are reapplied before the restored environment is returned to service.

To request access, export, correction, or deletion, contact the TradeMaker privacy contact. We may update this policy to reflect operational or legal changes and will publish a revised effective date.