1. Overview
This policy explains how long P3RSON, Inc. keeps data and how it is deleted. The Privacy Policy explains what we collect and why. We keep data only as long as we need it for the purpose it was collected, or as the law requires.
Questions: privacy@p3rson.com.
2. Retention Schedule
2.1 Transactions
| Data type | Retention | Reason | Deletion |
|---|---|---|---|
| Completed bookings | 7 years | Tax and dispute resolution | Permanent deletion |
| Payments and escrow records | 7 years | Tax reporting, refund disputes | Permanent deletion |
| Invoices and receipts | 7 years | Tax requirements | Permanent deletion |
| Payment method references | 30 days after transaction | Fraud prevention | Immediate deletion |
| Failed payments | 90 days | Retries, chargeback defense | Permanent deletion |
Card numbers are held by Stripe, not P3RSON.
2.2 Communications
| Data type | Retention | Reason | Deletion |
|---|---|---|---|
| Messages (active) | Until you delete them | Your reference | You delete them |
| Messages (archived) | 1 year | Disputes | Permanent deletion |
| Deleted messages (soft) | 30 days | Recovery | Permanent deletion |
| Email notifications | 90 days | Bounce handling | Permanent deletion |
| Support tickets | 1 year | Quality review | Permanent deletion |
2.3 Account and Profile
| Data type | Retention | Reason | Deletion |
|---|---|---|---|
| Profile (active) | Until you delete your account | Operating the service | Account deletion |
| Profile (deleted) | 30 days | Soft-delete grace period | Permanent deletion, personal data removed |
| Login history | 90 days | Security monitoring | Permanent deletion |
| Account settings | Until you delete your account | Your preferences | Account deletion |
| Avatar and media | Until you delete your account | Profile display | Account deletion |
| Locked under-13 accounts | For as long as the lock is in place, or longer where the law requires | Keeping the account locked | Deleted when no longer needed |
2.4 Content
| Data type | Retention | Reason | Deletion |
|---|---|---|---|
| Posts (published) | Until you delete them | Your content | You delete them |
| Digital snaps | Until you delete them | Your portfolio | You delete them |
| Stories | 24 hours | Stories feature | Automatic |
| Live stream replays | 30 days | Replay | Permanent deletion |
| Draft content | 90 days if inactive | Cleanup | Permanent deletion |
| Deleted content (soft) | 30 days | Recovery | Permanent deletion |
| Hard delete of content | Within 60 days of deletion | Removal from storage | Permanent deletion |
| Backups | 30 days | Disaster recovery | Overwritten |
| Moderation reports | 3 years | Pattern detection, compliance | Permanent deletion |
2.5 Digitals, AI Analysis and Biometric-Type Data
| Data type | Retention | Deletion |
|---|---|---|
| Source Digitals images (full body, waist up, portrait, side view) | Until you delete them or your account, and in all cases no later than 3 years after your last interaction with your account, unless a longer period is required by law or a legal hold applies | Permanent deletion |
| Audit results and AI-generated metadata (readiness score, photo quality checks, AI Scout Notes, reason codes, moderation flags) | Same schedule as Digitals images | Permanent deletion |
| Face-detection values (face count, confidence, brightness, sharpness) | Same schedule, stored with the audit record | Permanent deletion |
Account deletion starts deletion of this data within 30 days. Backup copies are removed within a further 30 days. Copies held by AI providers are handled under the provider's terms (see Sub-Processors). P3RSON does not create or store face templates or face geometry. See the Biometric and Sensitive Data Notice.
2.6 Audit and Compliance
| Data type | Retention | Reason |
|---|---|---|
| Audit logs | 5 years | Legal compliance, security |
| Admin access logs | 5 years | Security monitoring |
| Policy acceptance records | 5 years | Proof of acceptance |
| Dispute resolutions | 5 years | Legal and dispute records |
| Incident reports | 5 years | Security incidents |
| Guardian approval records | 7 years | COPPA records (see Section 7) |
2.7 Analytics
| Data type | Retention | Reason |
|---|---|---|
| Detailed user analytics | 90 days | Anonymization window |
| Behavioral signals | 30 days | Abuse detection |
| Engagement metrics | 1 year | Reporting |
| Aggregate statistics | No fixed limit | Anonymized, not personal data |
2.8 Media Kit Sent history and frozen shared content
When you share a Media Kit or Digitals, we keep a frozen copy of the selected content and a Sent history showing the recipient details you entered, the share date, link settings and recorded activity. Later edits to your profile do not change that copy. We use these records to provide sharing, activity receipts, your history, and security controls.
Sent history and its frozen content remain after a link expires or is revoked and after P3 Pro ends. After P3 Pro ends, your existing history is read-only: you can review it, but you cannot create or resend shares without the required subscription and eligibility. Subscription lapse does not delete your history. Privacy requests and safety controls remain available regardless of subscription status.
We delete this history and its associated personal data when the account is deleted or when a valid legal deletion request requires it. If the law requires preservation of particular records, we restrict those records to that purpose and delete them when the preservation requirement ends. We do not retain all Sent history merely because one record must be preserved. This rule does not let us recall copies already saved outside P3RSON.
This specific schedule applies to the frozen shared copies of selected Digitals and recorded link activity; the source Digitals, private AI analysis, audit results and face-detection values remain under Section 2.5. It does not extend biometric or sensitive-data retention. The analytics schedule in Section 2.7 does not expire Sent history.
Applicable recipient deletion requests erase or redact the recipient’s personal data even if the sender keeps their account. Deletion covers the shares, snapshots, events, link tokens, operations, history cursors, retained media copies and exports under P3RSON’s control. Existing account-deletion and backup procedures below apply.
3. Account Deletion
Go to Settings > Privacy and data > Delete account. You confirm with the sign-in method on your account. Deleting your account does not cancel a subscription. Cancel P3 Pro in your device's Subscriptions settings and cancel the Agency and Brand plan in the app under Team settings, Billing. Unspent P3 Coins are forfeited when deletion is final and are not refunded. An organization owner must transfer ownership before deleting. If you confirm with Sign in with Apple, we disconnect P3RSON from your Apple Account when you schedule deletion.
Soft delete (30 days). Your profile is hidden, you cannot log in, and you can reactivate by signing in within 30 days.
Hard delete (after 30 days). We delete your name, email, phone, avatar, posts, snaps and Digitals. Content is removed from storage within 60 days. Backups are overwritten within a further 30 days. Messages you sent may remain in other people's inboxes. Booking and payment records are kept for 7 years with your name and contact details redacted where the law allows.
You can also delete single messages, posts, snaps and photos at any time. We may delay deletion of data under a legal hold or an open dispute.
4. Exports
You can request an export of your data. We deliver it within 30 days by email link, valid for 30 days. See the Data Portability.
5. Automatic Cleanup
| Frequency | Jobs |
|---|---|
| Daily | Delete failed payment attempts older than 90 days; delete soft-deleted messages and accounts past 30 days |
| Weekly | Delete expired one-time codes, email notifications older than 90 days, IP logs older than 90 days |
| Monthly | Delete detailed analytics older than 90 days, behavioral signals older than 30 days, temporary cache files older than 30 days |
| Quarterly | Delete archived messages older than 1 year, moderation reports older than 3 years, support tickets older than 1 year |
6. Holds and Overrides
We may pause deletion for a legal hold (a dispute, arbitration or litigation), a fraud, harassment or safety investigation, a tax audit or subpoena, or a needed backup recovery. We tell you when a hold is placed on your data, unless the law forbids it, and when it ends.
7. Minors (COPPA Retention Schedule)
This is our written retention schedule for the personal information of users under 18. We keep a minor's data no longer than needed for the purpose it was collected.
| Data | Retention |
|---|---|
| Date of birth entered at sign-up | Used for the age screen; stored only as needed to keep the account's age status |
| Guardian approval records (email code, signature record, approval scope) | 7 years |
| Minor account data (profile, content) | Until the guardian or the minor asks us to delete it, or the account is deleted |
| Minors' content on guardian request | Deleted within 30 days of the request |
| Private P3 Audit data of a minor | Same as the Digitals schedule in Section 2.5, and deleted on guardian request within 30 days |
| Under-13 accounts found on the service | Suspended and locked. We keep a small lock record (account ID, date of the lock, a one-way hashed form of the sign-in email and phone number, and the date of birth that was entered) for as long as the lock is in place, or longer where the law requires. Other personal information is deleted when a parent or guardian asks |
A guardian can ask for access to or deletion of a minor's data through guardian-support@p3rson.com. Booking, payment and legal records that the law requires us to keep stay for 7 years, but minors cannot book or be paid on P3RSON. When a minor turns 18, the data stays until they delete it. P3RSON does not sell or share minors' data, and does not use it for advertising.
8. Data Sharing Limits
We share data with the service providers listed in the Sub-Processors document, with law enforcement under valid legal process, and with a minor's guardian for approval records. When you create a Media Kit share link, people with the link can also receive the frozen content you selected, and the sender receives the disclosed activity in Sent history. We do not sell personal data and do not share it with advertisers.
9. Breach Notification
If we find unauthorized access to personal data, we contain it within 24 hours, assess its scope and preserve logs. We notify affected users by email within 72 hours of confirming the breach, and notify regulators as state breach laws require. If a service provider has a breach involving your data, we tell you what was exposed and what to do.
10. Security Program
P3RSON keeps a written information security program: a named security coordinator, an annual risk assessment, access controls, encryption in transit and at rest, oversight of service providers, and an incident response plan. This program also covers children's personal information. Security reports: security@p3rson.com.
11. Your Rights
To access, correct, delete or export your data, or to ask how long we keep something, use Settings > Privacy or email privacy@p3rson.com. We respond within 30 days (45 days for state-law requests where the law allows an extension). Deletion exceptions are legal holds, tax and booking record rules, and open disputes. California residents can also write to ccpa@p3rson.com. Details are in the Privacy Policy.
12. Changes
When we change retention periods in a way that is material, we ask you to accept again as described in the Terms of Service, Section 8.