1. Overview
This policy explains how long P3RSON, Inc. keeps data and how it is deleted. The Privacy Policy explains what we collect and why. We keep data only as long as we need it for the purpose it was collected, or as the law requires.
Questions: privacy@p3rson.com.
2. Retention Schedule
2.1 Transactions
| Data type | Retention | Reason | Deletion |
|---|---|---|---|
| Completed bookings | 7 years | Tax and dispute resolution | Permanent deletion |
| Payments and booking payment records | 7 years | Tax reporting, refund disputes | Permanent deletion |
| Invoices and receipts | 7 years | Tax requirements | Permanent deletion |
| Payment method references | 30 days after transaction | Fraud prevention | Immediate deletion |
| Failed payments | 90 days | Retries, chargeback defense | Permanent deletion |
Card numbers are held by Stripe, not P3RSON.
2.2 Communications
| Data type | Retention | Reason | Deletion |
|---|---|---|---|
| Messages | Until your account is deleted | Your reference and disputes | Deleted with your account; the other person keeps their copy |
| Email notifications | 90 days | Bounce handling | Permanent deletion |
| Support tickets | 1 year | Quality review | Permanent deletion |
2.3 Account and Profile
| Data type | Retention | Reason | Deletion |
|---|---|---|---|
| Profile (active) | Until you delete your account | Operating the service | Account deletion |
| Profile (deleted) | 30 days | Soft-delete grace period | Permanent deletion, personal data removed |
| Sign-in history and sign-in location | 90 days | Security monitoring | Permanent deletion; also erased when you delete your account |
| Account settings | Until you delete your account | Your preferences | Account deletion |
| Avatar and media | Until you delete your account | Profile display | Account deletion |
| Locked under-13 accounts | For as long as the lock is in place, or longer where the law requires | Keeping the account locked | Deleted when no longer needed |
2.4 Content
| Data type | Retention | Reason | Deletion |
|---|---|---|---|
| Posts (published) | Until you delete them | Your content | You delete them |
| Published Media Kits, including agency kits you approved | Public until you take them down, remove them or delete your account | Your content | Taken off public view at once; deleted with your account |
| Digital snaps | Until you delete them | Your portfolio | You delete them |
| Draft content | 30 days | Cleanup | Permanent deletion |
| Deleted posts and their files | 60 days after you delete them (a deleted post cannot be restored) | Removal from storage | Permanent deletion |
| Backups | 30 days | Disaster recovery | Overwritten |
| Moderation reports | 3 years | Pattern detection, compliance | Permanent deletion |
2.5 Digitals, AI Analysis and Biometric-Type Data
| Data type | Retention | Deletion |
|---|---|---|
| Source Digitals images (full body, waist up, portrait, side view) | Until you delete them or your account, and in all cases no later than 3 years after your last interaction with your account, unless a longer period is required by law or a legal hold applies | Permanent deletion |
| Audit results and AI-generated metadata (readiness score, photo quality checks, AI Scout Notes, reason codes, moderation flags) | Same schedule as Digitals images | Permanent deletion |
| Face-detection values (face count, confidence, brightness, sharpness) | Same schedule, stored with the audit record | Permanent deletion |
Account deletion starts deletion of this data within 30 days. Backup copies are removed within a further 30 days. Copies held by AI providers are handled under the provider's terms (see Sub-Processors). P3RSON does not create or store face templates or face geometry. See the Biometric and Sensitive Data Notice.
2.6 Audit and Compliance
| Data type | Retention | Reason |
|---|---|---|
| Audit logs | 7 years | Legal compliance, security |
| Admin access logs | 7 years | Security monitoring |
| Policy acceptance records | 7 years | Proof of acceptance |
| Dispute resolutions | 7 years | Legal and dispute records |
| Incident reports | 5 years | Security incidents |
| Guardian approval records | 7 years | COPPA records (see Section 7) |
2.7 Analytics
| Data type | Retention | Reason |
|---|---|---|
| Detailed user analytics | 90 days | Anonymization window |
| Behavioral signals | 30 days | Abuse detection |
| Engagement metrics | 1 year | Reporting |
| Aggregate statistics | No fixed limit | Anonymized, not personal data |
2.8 Media Kit Sent history and frozen shared content
Today you can share one public link to your Media Kit and revoke it. Sharing with named people, Sent history, and open or view receipts are not available in this version; the parts below about them apply only once the app shows them to you.
When you share a Media Kit or Digitals, we keep a frozen copy of the selected content and a Sent history showing the recipient details you entered, the share date, link settings and recorded activity. Later edits to your profile do not change that copy. We use these records to provide sharing, activity receipts, your history, and security controls.
Sent history and its frozen content remain after a link expires or is revoked and after P3 Pro ends. After P3 Pro ends, your existing history is read-only: you can review it, but you cannot create or resend shares without the required subscription and eligibility. Subscription lapse does not delete your history. Privacy requests and safety controls remain available regardless of subscription status.
We delete this history and its associated personal data when the account is deleted or when a valid legal deletion request requires it. If the law requires preservation of particular records, we restrict those records to that purpose and delete them when the preservation requirement ends. We do not retain all Sent history merely because one record must be preserved. This rule does not let us recall copies already saved outside P3RSON.
This specific schedule applies to the frozen shared copies of selected Digitals and recorded link activity; the source Digitals, private AI analysis, audit results and face-detection values remain under Section 2.5. It does not extend biometric or sensitive-data retention. The analytics schedule in Section 2.7 does not expire Sent history.
Applicable recipient deletion requests erase or redact the recipient’s personal data even if the sender keeps their account. Deletion covers the shares, snapshots, events, link tokens, operations, history cursors, retained media copies and exports under P3RSON’s control. Existing account-deletion and backup procedures below apply.
3. Account Deletion
Go to Settings > Privacy and data > Delete account. You confirm with the sign-in method on your account. Deleting your account does not cancel a subscription. Cancel P3 Pro in your device's Subscriptions settings and cancel the Agency and Brand plan in the US app under Team settings, Billing. Purchased P3 Coins you have not spent are lost when deletion is final and are not refunded. Earned coins have no cash value. You cannot delete your account while you own an agency or brand organization, or while a payout, held payment or dispute is still open. Transfer ownership or wait for these to finish, or email privacy@p3rson.com. If you confirm with Sign in with Apple, we disconnect P3RSON from your Apple Account when you schedule deletion.
Soft delete (30 days). Your profile is hidden, you cannot log in, and you can reactivate by signing in within 30 days.
Hard delete (after 30 days). We delete your name, email, phone, avatar, posts, snaps and Digitals. Content is removed from storage within 60 days. Backups are overwritten within a further 30 days. Messages you sent may remain in other people's inboxes. Booking and payment records are kept for 7 years with your name and contact details redacted where the law allows.
You can delete single posts and photos at any time. Messages are deleted when your account is deleted; the other person keeps their copy. We may delay deletion of data under a legal hold or an open dispute.
4. Exports
In the app, go to Settings > Privacy and data > Get a copy of your data, which shows the address to email. Email privacy@p3rson.com to ask for a copy. It is free. See the Data Portability document.
5. Automatic Cleanup
Our systems automatically:
- delete draft posts after 30 days;
- permanently delete posts and their files 60 days after you delete them;
- delete sign-in location history after 90 days;
- erase deleted accounts after the 30-day grace period.
The other periods in Section 2 are the longest we keep data. We remove that data in regular reviews.
6. Holds and Overrides
We may pause deletion for a legal hold (a dispute, arbitration or litigation), a fraud, harassment or safety investigation, a tax audit or subpoena, or a needed backup recovery. We tell you when a hold is placed on your data, unless the law forbids it, and when it ends.
7. Minors (COPPA Retention Schedule)
This is our written retention schedule for the personal information of users under 18. We keep a minor's data no longer than needed for the purpose it was collected.
| Data | Retention |
|---|---|
| Date of birth entered at sign-up | Used for the age screen; stored only as needed to keep the account's age status |
| Guardian approval records (email code, signature record, approval scope) | 7 years |
| Minor account data (profile, content) | Until the guardian or the minor asks us to delete it, or the account is deleted |
| Minors' content on guardian request | Deleted within 30 days of the request |
| Private P3 Audit data of a minor | Same as the Digitals schedule in Section 2.5, and deleted on guardian request within 30 days |
| Under-13 accounts found on the service | Suspended and locked. We keep a small lock record (account ID, date of the lock, a one-way hashed form of the sign-in email and phone number, and the date of birth that was entered) for as long as the lock is in place, or longer where the law requires. Other personal information is deleted when a parent or guardian asks |
A guardian can ask for access to or deletion of a minor's data through guardian-support@p3rson.com. Booking, payment and legal records that the law requires us to keep stay for 7 years, but minors cannot book or be paid on P3RSON. When a minor turns 18, the data stays until they delete it. P3RSON does not sell or share minors' data, and does not use it for advertising.
8. Data Sharing Limits
We share data with the service providers listed in the Sub-Processors document, with law enforcement under valid legal process, and with a minor's guardian for approval records. When you create a Media Kit share link, people with the link can also receive the frozen content you selected, and the sender receives the disclosed activity in Sent history. We do not sell personal data and do not share it with advertisers.
9. Breach Notification
If we find unauthorized access to personal data, we contain it within 24 hours, assess its scope and preserve logs. If we confirm a breach of your personal data, we tell you without unreasonable delay and within the time the law requires. We notify regulators as state breach laws require. If a service provider has a breach involving your data, we tell you what was exposed and what to do.
10. Security Program
P3RSON keeps a written information security program: a named security coordinator, an annual risk assessment, access controls, encryption in transit and at rest, oversight of service providers, and an incident response plan. This program also covers children's personal information. Security reports: security@p3rson.com.
11. Your Rights
To access, correct, delete or export your data, or to ask how long we keep something, use Settings > Privacy and data or email privacy@p3rson.com. We confirm your request within 10 business days and answer within 45 days. Deletion exceptions are legal holds, tax and booking record rules, and open disputes. California residents can also write to ccpa@p3rson.com. Details are in the Privacy Policy.
12. Changes
When we change retention periods in a way that is material, we tell you in advance as described in the Terms of Service, Section 8.