Keep data only while it has a service, security, contractual or legal purpose.

This policy explains the retention approach for XZMargin. Exact contractual retention or deletion commitments in an executed enterprise agreement take priority over this public policy.

Document status

Effective date: 16 September 2026
Operator: XZ BYTECORE PRIVATE LIMITED
If a signed customer agreement conflicts with this public policy, the signed agreement controls to the extent of that conflict.

Active workspace data

Account, company, transaction, inventory, report and configuration data may be retained while a workspace is active and for as long as needed to provide the service, maintain evidence trails and support customer-requested workflows.

Uploaded and derived data

Imported business records and derived calculations may remain available in the workspace so the customer can reproduce findings, inspect source evidence and generate reports. Customers should avoid uploading fields that are unnecessary for the intended analysis.

Operational logs and security records

Authentication events, import status, audit records, error information and security-relevant logs may be retained for operational troubleshooting, fraud prevention, abuse investigation and security. Retention may differ by log type and infrastructure provider.

Billing and legal records

Invoices, payment references, tax records, contracts and records required for legal, accounting or dispute purposes may be retained for the period required by applicable law or legitimate legal needs even after product data is deleted.

Backups

Deleted data may remain temporarily in encrypted or provider-managed backups until the relevant backup lifecycle expires. Backup copies are intended for disaster recovery and are not treated as active customer workspaces.

Deletion requests

A customer may request deletion through the account or Contact/Grievance channel. XZ BYTECORE will verify authority before acting on a workspace-wide request. The response and deletion process will follow applicable law and any contractual deletion timeline. We do not publish a shorter fixed deletion SLA unless it has actually been operationally committed.

Export before deletion

Customers should export reports or other data they need before requesting irreversible deletion. Once data has been deleted from active systems and applicable recovery windows have expired, restoration may not be possible.

Legal holds and exceptions

Deletion may be delayed or limited where retention is required by law, a binding order, fraud/security investigation, payment dispute or another lawful obligation. Access to retained exception data should remain restricted to the relevant purpose.