Data Retention & Deletion Policy

Chesed Projects · CC Charges Tracker · Effective: June 25, 2026 · Review: annually

This policy describes how long financial data is kept in the CC Charges Tracker application and how it is deleted.

1. What We Retain

• Account metadata and transaction records imported via Plaid.
• Access tokens needed to keep linked accounts in sync.
• Security and sync logs.

2. Retention Periods

• Transaction & account data: retained while needed for bookkeeping and to meet applicable accounting/legal requirements, then deleted.
• Access tokens: deleted promptly when an institution is disconnected.
• Logs: retained for a limited period for monitoring and audit, then rotated and purged.

3. Deletion on Request

On request, or when an account is disconnected, we delete the associated Plaid access token and can remove stored transaction and account records. Requests can be sent to mkantor@mkantor.com.

4. Revoking Access

Disconnecting an institution in the App stops further data collection. Connections can also be reviewed or revoked through the Plaid Portal. When access is revoked, we stop syncing and delete the corresponding access token.

5. Secure Disposal

Deleted data is removed from the active database. Backups, if any, are encrypted and age out on a defined cycle, after which the data is no longer recoverable.