Data Retention & Deletion Policy

1. Data We Collect

DebtPilot AI collects the following categories of data when you use our service:

• Account information (name, email address, hashed password)
• Financial data you enter (debts, income, expenses, savings goals)
• Payment scheduling data (scheduled payments, payment history)
• Bank account connection data (bank name, account type, last 4 digits, Plaid access tokens)
• Usage data (login events, AI plan generations, feature usage)
• Subscription data (plan type, billing status via Stripe)

2. Data Retention

We retain your data for as long as your account is active. Specifically:

• Active accounts: All data retained for the duration of the account
• Canceled subscriptions: Account data retained for 30 days after cancellation, then automatically deleted
• Inactive accounts: Accounts with no login activity for 24 months will be flagged for deletion with 30 days notice via email
• Payment records: Transaction records retained for 7 years for tax and legal compliance purposes
• Backups: Database backups retained for 30 days

3. Data Deletion

You have the right to request deletion of your account and all associated personal data. To do so:

• Option 1: Use the "Delete My Account" button in Account Settings
• Option 2: Email support@debtpilot.io with subject "Account Deletion Request"

Upon receiving a deletion request, we will:

• Confirm the request within 2 business days
• Delete all personal data within 7 business days
• Send a confirmation email when deletion is complete
• Cancel any active Stripe subscription
• Remove bank connection data from Plaid

Note: Some data may be retained if required by law (e.g., transaction records for tax purposes).

4. Third-Party Data

When you connect your bank account via Plaid, data deletion requests are forwarded to Plaid. You can also manage your Plaid connections directly at my.plaid.com.

Stripe retains billing records independently per their data retention policy. Contact Stripe at stripe.com/privacy for their records.

5. Contact

For any questions about this policy or to submit a data request:

• Email: support@debtpilot.io
• Company: BrightWave Technology LLC
• Response time: Within 2 business days