How long we keep an application, a statement, or a privacy request.
Working files
A statement, ID image, or voided check you send for a review is kept for the life of the working deal and then 24 months after we last touched it, unless you ask us to delete it sooner and no law says we have to keep it. If you boarded with a processor, they have their own clock. Ours does not control theirs.
Inquiries and tickets
Submit-an-inquiry and tech-ticket records: 24 months after close, then delete or de-identify.
Privacy and legal holds
A privacy request and our reply: 36 months (you may need the trail to appeal). A legal hold overrides deletion until the hold lifts.
Shop orders
If you buy hardware from this shop, the order record follows tax and warranty rules — at least 7 years for tax support where that applies — and the ship-to you gave us.
Backups
Host backups can lag a deletion by the host’s backup window. We will not pull a deleted file back into production to work a deal.