Data Retention and Deletion Policy
Last updated: March 27, 2026
Effective since March 27, 2026
1. Introduction
This Policy describes how long cepaos LLC retains different types of data and the secure deletion process upon termination.
It supplements our Privacy Policy and the Terms of Service.
2. Retention Table by Data Type
| Data type | Retention period | Basis / Reason |
|---|---|---|
| Account data | Contract duration + 30 days | Service provision |
| Vineyard and cellar operational data | Contract duration + 5 years | INV obligation |
| Access and audit logs | 90 days | Operational security |
| Billing data | 10 years | Tax obligation |
| General backups | 30-day rotation | Operational continuity |
| Support data | 2 years | Service improvement |
| Marketing and waitlist data | Until opt-out or 2 years of inactivity | Consent |
3. Deletion Process Upon Cancellation
- Cancellation confirmed — client initiates from dashboard or email.
- Read-only access — 30 days — export available in CSV/JSON.
- Logical deletion — data becomes inaccessible after 30 days.
- Backup purge — additional 30 days.
- Complete deletion — maximum 60 days from cancellation.
4. Exceptions to Deletion
Billing data: 10 years. INV operational data: 5 years. Data under legal proceedings: retained until resolution.
5. Data in Backups
Backups have a 30-day rotation cycle. After purge, data is not recoverable.
6. Deletion Certificate
Request at privacy@cepaos.com. Delivery: 10 business days.
7. Right to Export
The client may export all data at any time in CSV and JSON format.
8. Contact
- privacy@cepaos.com
- cepaos LLC — Wyoming, United States
This document does not constitute legal advice.