Retention and Deletion
How long we keep data.
This schedule helps keep tenant, payment and account data only for as long as it is reasonably needed.
Effective date: 18 June 2026. Retention may be extended for legal claims, audits, security investigations, accounting, tax, fraud prevention, regulatory requests or Customer instructions.
1. Retention Schedule
| Data category | Normal retention period | Action at end of period |
|---|---|---|
| Customer account and subscription records | For the active account plus up to 7 years after closure for accounting, tax, contract and dispute purposes. | Delete, anonymise or archive with restricted access. |
| Tenant profiles and tenancy records | For the active tenancy or customer subscription plus up to 7 years after account closure or tenant removal where needed for rent, audit or dispute records. | Delete, anonymise or return/export where technically available. |
| Payment, invoice and receipt records | Up to 7 years after the transaction or invoice date, or longer where law or dispute preservation requires. | Retain as financial record, then delete or anonymise. |
| Messages, notices and communication logs | For the active account plus up to 7 years where related to rent, tenancy, disputes or legal notice history. | Delete or anonymise unless legally preserved. |
| OTP reset records | Usually 30 days or less after expiry or consumption, unless needed for security investigation. | Delete. |
| Security logs and session records | Usually 12 months, longer if needed for security, fraud, investigation or legal claims. | Delete or aggregate. |
| Contact form leads and demo enquiries | Up to 24 months after last interaction unless the lead becomes a Customer or requests deletion earlier. | Delete or move to Customer record. |
| Support tickets and emails | Up to 3 years after resolution, longer if tied to billing, security or legal issues. | Delete or archive with restricted access. |
| Backups | For the backup lifecycle used by the relevant hosting or storage provider. | Expire through normal backup rotation. |
2. Deletion Requests
People may request deletion where the law allows it. Tenants should usually contact their landlord or property manager first because the Customer controls tenancy records. Pangisha will help Customers with deletion, export, correction or restriction requests where technically available and legally appropriate.
3. Legal Holds
We may pause deletion where data is needed for litigation, investigations, regulatory requests, fraud prevention, accounting, tax compliance, contract enforcement or security incident response.
4. Review
Pangisha should review retained personal data regularly, confirm whether it still needs to be kept, and delete, anonymise or restrict data that no longer has a lawful purpose.