Data Retention Policy

1. Purpose and Scope

This Data Retention Policy describes how Black Cat Analytics LLC (“Black Cat,” “we,” “us,” or “our”) retains and deletes data collected through the Black Cat Analytics application at app.tryblackcat.com and related services (the “Service”). It supports our Privacy Policy and is incorporated into it by reference. This Policy applies to personal information and other data we process about account holders, the property owners they serve, cleaners, and Service operations.

2. Guiding Principles

• We retain data only for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.
• We retain sensitive data, such as financial account information and taxpayer identification numbers, only as long as needed for the purposes for which it was collected.
• When data is no longer needed, we delete it or de-identify it, subject to backup cycles and legal holds.
• We give users in-app tools to delete their data and accounts.

3. Definitions

• Account Data. Account and profile information, including name, email address, password, and Google profile data.
• Customer Content. Financial, property, booking, and related records that a user uploads, imports, or syncs, including transactions obtained through Plaid.
• Owner Data. Information about third-party property owners that a Property Management tier user provides, which may include taxpayer identification numbers.
• Cleaner Data. Records, contact information, job assignments, and payout information relating to cleaners.
• Operational Data. Logs, analytics, error reports, and similar data we generate to operate, secure, and improve the Service.

4. Retention Schedule

The following schedule describes our standard retention periods. Periods may be extended where required by law or to address a legal hold, dispute, or security matter (see Section 8). Periods for third-party providers reflect our configuration or the provider's standard practice and may change.

5. Deletion Procedures

User-initiated deletion. Users can delete specific data at any time from the Danger Zone in Settings. Users can also permanently delete their account, which removes associated Account Data and Customer Content from our primary database.

On account deletion. When an account is deleted, we (a) remove Account Data and Customer Content from the primary database, (b) revoke our Plaid access tokens for any connected accounts, and (c) schedule the removal of residual copies from backups within thirty (30) days.

Method of deletion. We delete data by removing it from active systems and allowing it to age out of backups on the normal backup cycle. Where deletion is not immediately feasible, we isolate the data and protect it from further processing until deletion.

6. Backups and Residual Copies

We maintain encrypted backups for disaster recovery and business continuity. Deleted data may persist in backups until those backups are overwritten or expire, generally within thirty (30) days. Backup copies are not used for any purpose other than recovery and are deleted on the normal backup cycle.

7. Data Held by Third-Party Providers

Once data is transferred to a service provider in the course of operating the Service, that provider retains the data according to its own retention practices, and we may not be able to delete it from the provider's systems. This includes email already delivered through Resend, error reports captured by Sentry, payment records held by Stripe, and account information held by Plaid. Each provider's handling is governed by its own privacy policy.

8. Legal Holds and Exceptions

We may retain data beyond the periods described above where retention is required to comply with a legal obligation, respond to or anticipate a legal claim, investigation, or dispute, enforce our agreements, or protect the rights, property, or safety of Black Cat, our users, or others. When a legal hold applies, the affected data is preserved until the hold is released, after which it is deleted in accordance with this Policy.

9. Sensitive Personal Information

Financial account information accessed through Plaid and taxpayer identification numbers contained in Owner records are treated as sensitive. We retain this information only as long as necessary to provide the Service and to meet legal obligations, store taxpayer identification numbers with application-layer encryption, and delete this information on account deletion, subject to any applicable legal hold or a retention period required by tax or accounting law.

10. Property Management Owner Data

With respect to Owner Data provided by Property Management tier users, we act as a service provider and retain and delete Owner Data in line with this Policy and at the direction of the responsible user. On deletion of the user's account, or on the user's instruction, we delete the associated Owner Data, subject to backup cycles and legal holds.

11. Review and Updates

We review this Policy periodically and update it as our practices, providers, or legal obligations change. Material changes will be reflected in the Effective Date above and communicated as described in our Privacy Policy.

12. Contact

Questions about this Policy may be sent to support@tryblackcat.com.