Data Retention and Deletion

This Policy outlines how Prosperimi retains, stores, and disposes of personal and financial data. This policy applies to all customer accounts, transactional data, and related information collected through our software-as-a-service platform.

We are committed to the principle of data minimization. We do not retain data for longer than is reasonably necessary to provide our services, maintain security, or meet legal and regulatory obligations. We do not sell customer personal or financial information to third parties for any reason.

• Standard Retention Periods
  We collect limited technical details such as browser type, language settings, and usage analytics to operate, maintain, and improve the site.

  Unless a specific consumer request or legal obligation dictates otherwise, data is retained according to the following schedules:

  • Active Account Data: All user profile information, operational financial data, and transaction history are retained for the duration of the active subscription to ensure uninterrupted service.
  • Closed/Inactive Account Data (Standard Limit): Unless otherwise requested, core customer data and financial processing history are retained for a period of twelve (12) months. During this period, customers will have reports only access to their data. At the end of this period all data is permanently and irrevocably deleted.
• Use of De-Identified and Aggregated Data for System Optimization
  To continuously improve, optimize, and maintain the performance, security, and accuracy of our platform (including machine learning models used for anomaly detection and service analytics), we may utilize data derived from customer financial transactions and platform interactions.

  We strictly enforce the following protection guardrails for this data:

  • Permanent De-Identification: Prior to entering any data analysis or training workflows, personal data and business identifiers are permanently stripped and separated.
  • No Business Re-Identification: The data is processed solely in an aggregated or de-identified format. The resulting training datasets do not contain, and cannot be used to trace or reconstruct, any information that could identify a customer.
  • Strict Non-Commercial Use: Aggregated system insights are utilized strictly for product and security enhancements. They are never shared, sold, or rented to third parties for commercial use.
• Fraud, Security, and Compliance Exceptions
  To protect the security, integrity, and safety of our platform and its users, as well as to meet regulatory obligations, certain limited identifiers are exempt from standard deletion cycles:

  Fraud Detection Records: Following the closure of an account, we retain specific non-sensitive identifiers—primarily user email addresses and IP addresses—for the purpose of detecting, preventing, and mitigating malicious activity and system abuse. This data is irreversably mangled to protect privacy and prevent commercial use.

  Compliance Records: Certain identifiers are retained to fulfill legal and regulatory obligations, for example keeping records of the account deletion process. This data is strictly controlled and is not used for commercial purposes.

• Consumer Deletion Requests (Right to Delete)
  We respect our users' privacy rights. Users may submit a formal request to delete their personal data at any time.

  Execution Timeline: Upon receiving a verifiable deletion request, we will process and permanently erase or anonymize the data from our active production systems and direct our downstream service providers to do the same within 45 days.

  Exemptions to Deletion Requests: We may deny or partially deny a deletion request if retaining the information is legally required to comply with federal or state financial record-keeping laws.

• Data Disposal and Destruction
  Once a retention window expires or a verified deletion request is approved (and no legal exemptions apply), data is permanently destroyed. Computerized data is erased using industry-standard secure deletion protocols to ensure it cannot be reconstructed or recovered. Backup tapes or disaster recovery snapshots will overwrite the data systematically in accordance with our standard backup lifecycle cycles.