Account and transaction records are retained for statutory and compliance obligations.

Security logs and incident records are retained for fraud prevention and auditability.

Support records are retained based on legal and operational requirements.

Data is deleted or anonymized when retention obligations expire.

Data minimization principles are applied to reduce unnecessary storage.

Backup and archival windows may delay immediate physical deletion.