1. Overview
This policy explains how long P3RSON, Inc. keeps data and how it is deleted. The Privacy Policy explains what we collect and why. We keep data only as long as we need it for the purpose it was collected, or as the law requires.
Questions: [email protected].
2. Retention Schedule
2.1 Transactions
| Data type | Retention | Reason | Deletion |
|---|---|---|---|
| Completed bookings | 7 years | Tax and dispute resolution | Permanent deletion |
| Payments and escrow records | 7 years | Tax reporting, refund disputes | Permanent deletion |
| Invoices and receipts | 7 years | Tax requirements | Permanent deletion |
| Payment method references | 30 days after transaction | Fraud prevention | Immediate deletion |
| Failed payments | 90 days | Retries, chargeback defense | Permanent deletion |
Card numbers are held by Stripe, not P3RSON.
2.2 Communications
| Data type | Retention | Reason | Deletion |
|---|---|---|---|
| Messages (active) | Until you delete them | Your reference | You delete them |
| Messages (archived) | 1 year | Disputes | Permanent deletion |
| Deleted messages (soft) | 30 days | Recovery | Permanent deletion |
| Email notifications | 90 days | Bounce handling | Permanent deletion |
| Support tickets | 1 year | Quality review | Permanent deletion |
2.3 Account and Profile
| Data type | Retention | Reason | Deletion |
|---|---|---|---|
| Profile (active) | Until you delete your account | Operating the service | Account deletion |
| Profile (deleted) | 30 days | Soft-delete grace period | Permanent deletion, personal data removed |
| Login history | 90 days | Security monitoring | Permanent deletion |
| Account settings | Until you delete your account | Your preferences | Account deletion |
| Avatar and media | Until you delete your account | Profile display | Account deletion |
2.4 Content
| Data type | Retention | Reason | Deletion |
|---|---|---|---|
| Posts (published) | Until you delete them | Your content | You delete them |
| Digital snaps | Until you delete them | Your portfolio | You delete them |
| Stories | 24 hours | Stories feature | Automatic |
| Live stream replays | 30 days | Replay | Permanent deletion |
| Draft content | 90 days if inactive | Cleanup | Permanent deletion |
| Deleted content (soft) | 30 days | Recovery | Permanent deletion |
| Hard delete of content | Within 60 days of deletion | Removal from storage | Permanent deletion |
| Backups | 30 days | Disaster recovery | Overwritten |
| Moderation reports | 3 years | Pattern detection, compliance | Permanent deletion |
2.5 Digitals, AI Analysis and Biometric-Type Data
| Data type | Retention | Deletion |
|---|---|---|
| Digitals images (full body, waist up, portrait, side view) | Until you delete them or your account, and in all cases no later than 3 years after your last interaction with your account, unless a longer period is required by law or a legal hold applies | Permanent deletion |
| Audit results and AI-generated metadata (readiness score, photo quality checks, AI Scout Notes, reason codes, moderation flags) | Same schedule as Digitals images | Permanent deletion |
| Face-detection values (face count, confidence, brightness, sharpness) | Same schedule, stored with the audit record | Permanent deletion |
Account deletion starts deletion of this data within 30 days. Backup copies are removed within a further 30 days. Copies held by AI providers are handled under the provider's terms (see Sub-Processors). P3RSON does not create or store face templates or face geometry. See the Biometric and Sensitive Data Notice.
2.6 Audit and Compliance
| Data type | Retention | Reason |
|---|---|---|
| Audit logs | 5 years | Legal compliance, security |
| Admin access logs | 5 years | Security monitoring |
| Policy acceptance records | 5 years | Proof of acceptance |
| Dispute resolutions | 5 years | Legal and dispute records |
| Incident reports | 5 years | Security incidents |
| Guardian approval records | 7 years | COPPA records (see Section 7) |
2.7 Analytics
| Data type | Retention | Reason |
|---|---|---|
| Detailed user analytics | 90 days | Anonymization window |
| Behavioral signals | 30 days | Abuse detection |
| Engagement metrics | 1 year | Reporting |
| Aggregate statistics | No fixed limit | Anonymized, not personal data |
3. Account Deletion
Go to Settings > Account > Delete Account.
Soft delete (30 days). Your profile is hidden, you cannot log in, and you can reactivate by signing in within 30 days.
Hard delete (after 30 days). We delete your name, email, phone, avatar, posts, snaps and Digitals. Content is removed from storage within 60 days. Backups are overwritten within a further 30 days. Messages you sent may remain in other people's inboxes. Booking and payment records are kept for 7 years with your name and contact details redacted where the law allows.
You can also delete single messages, posts, snaps and photos at any time. We may delay deletion of data under a legal hold or an open dispute.
4. Exports
You can request an export of your data. We deliver it within 30 days by email link, valid for 30 days. See the Data Portability.
5. Automatic Cleanup
| Frequency | Jobs |
|---|---|
| Daily | Delete failed payment attempts older than 90 days; delete soft-deleted messages and accounts past 30 days |
| Weekly | Delete expired one-time codes, email notifications older than 90 days, IP logs older than 90 days |
| Monthly | Delete detailed analytics older than 90 days, behavioral signals older than 30 days, temporary cache files older than 30 days |
| Quarterly | Delete archived messages older than 1 year, moderation reports older than 3 years, support tickets older than 1 year |
6. Holds and Overrides
We may pause deletion for a legal hold (a dispute, arbitration or litigation), a fraud, harassment or safety investigation, a tax audit or subpoena, or a needed backup recovery. We tell you when a hold is placed on your data, unless the law forbids it, and when it ends.
7. Minors (COPPA Retention Schedule)
This is our written retention schedule for the personal information of users under 18. We keep a minor's data no longer than needed for the purpose it was collected.
| Data | Retention |
|---|---|
| Date of birth entered at sign-up | Used for the age screen; stored only as needed to keep the account's age status |
| Guardian approval records (email code, signature record, approval scope) | 7 years |
| Minor account data (profile, content) | Until the guardian or the minor asks us to delete it, or the account is deleted |
| Minors' content on guardian request | Deleted within 30 days of the request |
| Private P3 Audit data of a minor | Same as the Digitals schedule in Section 2.5, and deleted on guardian request within 30 days |
| Under-13 accounts found on the service | Suspended and data deleted |
A guardian can ask for access to or deletion of a minor's data through [email protected]. Booking, payment and legal records that the law requires us to keep stay for 7 years, but minors cannot book or be paid on P3RSON. When a minor turns 18, the data stays until they delete it. P3RSON does not sell or share minors' data, and does not use it for advertising.
8. Data Sharing Limits
We share data only with the service providers listed in the Sub-Processors document, with law enforcement under valid legal process, and with a minor's guardian for approval records. We do not sell personal data and do not share it with advertisers.
9. Breach Notification
If we find unauthorized access to personal data, we contain it within 24 hours, assess its scope and preserve logs. We notify affected users by email within 72 hours of confirming the breach, and notify regulators as state breach laws require. If a service provider has a breach involving your data, we tell you what was exposed and what to do.
10. Security Program
P3RSON keeps a written information security program: a named security coordinator, an annual risk assessment, access controls, encryption in transit and at rest, oversight of service providers, and an incident response plan. This program also covers children's personal information. Security reports: [email protected].
11. Your Rights
To access, correct, delete or export your data, or to ask how long we keep something, use Settings > Privacy or email [email protected]. We respond within 30 days (45 days for state-law requests where the law allows an extension). Deletion exceptions are legal holds, tax and booking record rules, and open disputes. California residents can also write to [email protected]. Details are in the Privacy Policy.
12. Changes
When we change retention periods in a way that is material, we ask you to accept again as described in the Terms of Service, Section 8.