Data Retention & Deletion Policy

GetNyay collects and stores data that is necessary to provide the Platform’s services. We are committed to not retaining data longer than necessary and to making data deletion straightforward for users.

This policy is intended to complement our Privacy Policy, which explains what data we collect and how we use it. This policy focuses specifically on how long we keep data and what happens when you request deletion.

GetNyay holds the following categories of user data:

All users (including unauthenticated visitors)

• Temporary session data and draft complaint/document state created without an account

Registered users

• Account data: name, email, phone number, registration date, last login
• Complaint records: all complaint drafts, complaint metadata (category, company, status, payment status)
• Complaint content: the text of complaint letters generated on the Platform
• Uploaded evidence files: documents, images, and PDFs uploaded as supporting evidence
• Payment records: Stripe session IDs, payment intent IDs, payment status, and amounts (not card numbers)

Attorney subscribers (Attorney Max)

• Attorney account data: name, email, phone, subscription plan and status, billing history
• Client records entered by the attorney: client names, contact info, matter details
• Attorney-generated documents and legal notice drafts
• Custom template library created by the attorney
• Audit logs: timestamps and descriptions of attorney dashboard actions

System logs (all users)

• Server and access logs: IP addresses, timestamps, API requests, and error logs
• Security event logs: authentication failures, suspicious activity flags
• Audit logs (attorney actions): document creation, client additions, template operations
• AI usage logs: anonymised records of AI model interactions for quality assurance

The 30-day grace period after account deletion allows for recovery in cases of accidental deletion. Data is permanently deleted after the grace period expires. Payment records are retained for the full 7-year period regardless of account deletion — this is a legal obligation.

We retain different categories of data for different reasons:

• Temporary guest drafts for 48 hours: to allow unauthenticated users to return briefly without requiring an account, then auto-deleted to avoid accumulating personal data unnecessarily
• Account and complaint data during active use: to provide the service, allow you to access past drafts, and maintain your account history
• Account and complaint data for 30 days after deletion request: to allow recovery if you deleted your account accidentally or change your mind
• Attorney data while subscription is active: to provide the attorney dashboard service; plus 30-day grace to allow document download before permanent deletion
• Payment records for 7 years: to comply with financial record-keeping requirements under US tax law and applicable accounting standards
• Server logs for 90 days: to detect, investigate, and prevent abuse, fraud, and security incidents
• Security event logs for 12 months: to investigate potential security incidents and meet minimum log retention requirements
• Audit logs for 24 months: to maintain accountability and support dispute resolution for attorney platform actions
• AI usage logs for 12 months (anonymised): to improve the quality and accuracy of AI-generated document drafts
• Security incident logs for up to 3 years: to cooperate with law enforcement investigations if required

You can request deletion of your account and associated data at any time. To do so:

1. Email privacy@getnyay.in with the subject line: "Account Deletion Request"
2. Include your registered email address and any account identifier you have
3. We will verify your identity before processing the request
4. We will confirm receipt within 5 business days and complete the deletion within 30 days
5. We will send a confirmation email when your data has been permanently deleted

You may also request deletion of specific data (e.g., a specific complaint or uploaded file) without deleting your entire account. Email privacy@getnyay.in with the specific data you wish to have deleted and your account email address.

We may retain certain data beyond the periods stated above in the following circumstances:

• Where required to do so by applicable law, court order, or regulatory requirement
• Where data is relevant to an ongoing or anticipated legal dispute or investigation
• Where data relates to a security incident that is being investigated by us or law enforcement
• Where retention is necessary to enforce our Terms of Service or Acceptable Use Policy
• Payment records are always retained for the full 7-year period regardless of account deletion

Where we retain data beyond your deletion request due to a legal exception, we will inform you of this and of the specific legal basis for the retention.

GetNyay maintains database backups for operational continuity and disaster recovery. When you request data deletion:

• Your data will be deleted from the live production database within the stated timeframe
• Backup copies of your data may persist in encrypted backup archives for up to 30 additional days before being overwritten in the normal backup rotation cycle
• We cannot selectively delete data from backup archives; backup data is overwritten in its entirety according to the backup rotation schedule
• Data in backups is encrypted, inaccessible for normal use, and is never restored for standard operational purposes

This residual backup data retention period is standard practice for cloud-hosted platforms and does not affect your effective data deletion rights.

For data retention and deletion queries: