1. Purpose
This Data Retention and Deletion Policy describes how TheSHFTApp LLC ("TheSHFTApp," "we," "us," or "our") retains, archives, and deletes User Data and other information in connection with the Platform and Services.
This Policy is part of our privacy framework and supplements the Privacy Policy. Capitalized terms have the meanings in the Master Definitions.
2. General Retention Principles
We retain data for as long as:
- Your Account is active or as needed to provide the Services;
- Necessary to comply with legal obligations (e.g., tax, financial records);
- Necessary to resolve disputes, enforce agreements, or protect our legal interests;
- Required to maintain security and fraud prevention records; or
- Otherwise permitted by applicable law.
We do not retain data longer than necessary for these purposes.
3. Retention Schedules by Data Category
| Data Category | Retention Period | Notes |
|---|---|---|
| Account information (name, email, credentials) | Duration of Account + 30 days post-deletion | Deleted upon Account closure request processing |
| Profile and Professional Information | Duration of Account + 30 days | Deleted upon Account closure |
| Resume Data | Duration of Account + 30 days | Deleted upon Account closure |
| Career Intelligence Profile | Duration of Account + 30 days | Deleted upon Account closure |
| AI Inputs and AI Outputs | Up to 24 months from creation, or until Account deletion | Retained for quality assurance and service delivery |
| Answer Vault content | Duration of Account | Deleted upon Account closure |
| Application Tracker data | Duration of Account | Deleted upon Account closure |
| Smart Apply records | Duration of Account + 90 days | Extended for dispute resolution purposes |
| Payment and billing records | 7 years from transaction date | Required for tax and financial compliance |
| Legal hold data | Until hold is released | Overrides standard deletion schedules |
| Security logs and access logs | Up to 24 months | For security investigation and compliance |
| Communications with support | 3 years from last interaction | For quality assurance and dispute resolution |
| Analytics data (aggregated, de-identified) | Indefinitely | No longer contains Personal Information |
| Recruiter Referral records | Duration of Account + 1 year | Extended for legal record keeping |
| Device Information and usage data | 24 months | Rolling retention; older data deleted |
Specific retention periods may vary based on legal jurisdiction, regulatory requirement, or the nature of a particular dispute or investigation.
4. Account Deletion
4.1 How to Delete Your Account. You may request Account deletion:
- Through Account settings (if self-service deletion is available); or
- By contacting support@theshftapp.com with "Account Deletion Request" in the subject line.
4.2 Processing Time. We will process Account deletion requests within thirty (30) days of receiving a verified request, subject to the exceptions below.
4.3 Deletion Exceptions. We may retain certain data after Account deletion if:
- We are required to by applicable law (e.g., tax records);
- Data is needed for an active legal hold, investigation, or dispute;
- Data is needed to prevent fraud or enforce our agreements; or
- Data has been de-identified or aggregated such that it no longer identifies you.
4.4 Third-Party Data. Account deletion removes data from TheSHFTApp's systems but does not retrieve data already shared with Recruiters, Employers, or other third parties. Contact those parties directly to request deletion of data they hold.
5. Data Subject Deletion Requests
Under applicable privacy law (including GDPR, CCPA, and Florida Digital Bill of Rights), you may have the right to request deletion of your Personal Information. Submit deletion requests to privacy@theshftapp.com. We will respond within the timeframes required by applicable law (generally 30–45 days).
6. Legal Holds
Where data is subject to a legal hold (due to ongoing or anticipated litigation, regulatory inquiry, or government request), standard retention and deletion schedules are suspended for the affected data. Legal holds are released by authorized TheSHFTApp legal personnel upon resolution of the underlying matter.
7. Enterprise Customer Data
For Enterprise Customers subject to a Data Processing Addendum, data retention and deletion terms may be customized as agreed. Upon Enterprise Agreement termination, TheSHFTApp will delete or return Enterprise Customer Personal Data as specified in the DPA.
8. Subprocessor Deletion
We contractually require our Subprocessors to delete Personal Information they process on our behalf upon termination of their engagement, unless otherwise required by law.
9. Updates
This Policy may be updated from time to time. Significant changes will be communicated via our standard amendment notification process.
10. Contact
Data retention and deletion requests: privacy@theshftapp.com General inquiries: legal@theshftapp.com