Data Retention & Erasure Protocol
1. Governance of Data Lifecycle
At Kaujalgi Sakh, we view data storage not as a default, but as a temporary necessity. Our protocol for data management is strictly defined by the principle of "Storage Limitation." We pledge to store your personal information solely for the duration required to facilitate credit scoring services, execute fraud risk modeling, and satisfy the statutory mandates of the Indian jurisdiction. This document functions as an addendum to our primary Privacy Policy, available at: Privacy Policy.
2. Retention Timelines by Category
We classify the collected data into distinct tiers and apply specific storage lifecycles based on operational necessity and regulatory compliance.
2.1. Identity & Credit Compliance Data (Long-Term Retention)
Data Points: Phone Number, Email Address, User/Device/Advertising IDs.
Objective: To maintain unique user profiles, ensure secure login, and comply with financial audit norms.
Lifecycle: We maintain this data continuously while your account remains active. Upon account termination, we archive these identifiers for a mandatory period of five (5) years. This is to comply with Indian IT and financial regulations regarding data traceability and audit trails.
2.2. Risk Assessment & Verification Data (Medium-Term Retention)
Data Points: Call Logs (Verification metadata), Installed Application Inventory, Emergency Contact Information.
Objective:
- Call Logs: Strictly for "Flash Call" verification. Metadata is retained for 6 months to resolve potential disputes regarding account creation.
- Installed Apps & Emergency Contacts: Used to assess creditworthiness (alternative scoring) and prevent fraud. Retained for the duration of the active account to continuously monitor credit health.
Lifecycle: These are purged 90 days after account closure, unless linked to a flagged fraudulent transaction.
2.3. Technical Telemetry & Hardware Fingerprinting (Short-Term Retention)
Data Points: Device Information (Storage, Battery, Bluetooth, Hardware, RAM, Network, Sensors), Crash Logs, Approximate Location.
Objective: To create a "Device Fingerprint" for anti-fraud purposes (detecting emulators/bots) and to fix software bugs.
Lifecycle:
- Crash Logs: Deleted after 12 months.
- Device/Location Data: Retained for 3 years from the last login to prevent device-based fraud recidivism.
2.4. User-Generated Content
Data Points: Camera and Images (KYC Documents/Profile).
Lifecycle: Retained indefinitely while the account is active to allow you to view your profile. Deleted immediately upon account termination.
3. Mechanisms for Data Removal
You retain absolute sovereignty over your data, including the right to demand its permanent removal from our infrastructure.
3.1. Voluntary Erasure Request
You may formally request the deletion of your data by emailing our Data Protection Officer at business@wredprivatelimited.com. To validate the request, please ensure it originates from your registered email address. We commit to processing valid requests within 15 business days. Post-processing, all personal identifiers will be permanently scrubbed from our active databases.
3.2. Protocol on Account Dormancy
To practice responsible data hygiene, accounts that exhibit zero engagement (no login activity) for a continuous period of eighteen (18) months will be flagged for removal. We will issue a warning notification to your registered email 30 days prior to the scheduled execution. If no activity is recorded during this grace period, your data will be automatically erased or anonymized.
3.3. Third-Party Synchronization
We enforce strict contractual clauses with our service partners to ensure that any data shared for processing is also deleted or de-identified in alignment with your requests or our retention schedules.
4. Contact and Support
Should you have queries regarding this protocol or wish to exercise your data rights, please direct your correspondence to us.
Email: business@wredprivatelimited.com
Official Website: https://www.wredprivatelimited.com
SLA: We acknowledge all inquiries and strive to provide a substantive response within 10 business days.