Loading policy...
Data RetentionLoading policy...
Data RetentionThis Data Retention Policy explains how long we keep your personal data, why we retain it, and when we delete it. This policy complies with the Data Privacy Act of 2012 (Republic Act No. 10173) storage limitation principles and SOC 2 requirements.
We retain personal data only as long as necessary for:
After the retention period expires, we permanently delete or anonymize your data.
Retention: As long as your account remains active
Includes:
Why: Necessary to provide our services and maintain your account.
Retention: 90 days after account deletion
When you delete your account, your data is immediately soft-deleted (hidden from the platform) but retained for 90 days to allow for:
Hard Delete: After 90 days, your data is permanently and irreversibly deleted via our automated data retention cron job.
💡 Recovery Window: If you deleted your account by mistake, contact support@dailyquest.co within 90 days to request restoration.
Retention: 10 years from transaction date
Includes:
Why: Legal obligation for tax audits, financial reporting, and fraud prevention. The Bureau of Internal Revenue (BIR) of the Philippines requires businesses to keep financial records for 10 years under the National Internal Revenue Code (NIRC).
Note: Even if you delete your account, transaction records are retained for 10 years for legal compliance. Personal identifiers may be pseudonymized after 3 years.
Retention: 3 years after consent withdrawal
Includes:
Why: The Data Privacy Act of 2012 requires proof that consent was obtained. We must demonstrate compliance if challenged by the National Privacy Commission (NPC).
Note: The cookie consent cookie expires after 6 months (requiring you to re-consent), but the record of your consent is kept for 3 years for audit purposes.
Retention: 13 months (SOC 2 requirement)
Includes:
Why: Security monitoring, fraud detection, and SOC 2 audit compliance.
Retention: Until you unsubscribe or withdraw consent
Includes:
Deletion: When you unsubscribe, your email is removed within 30 days. Historical campaign metrics may be retained in anonymized form.
Retention: 3 years from conversation close date
Includes:
Why: Quality assurance, training, dispute resolution, and continuity of service.
Retention: 90 days after deletion
Includes:
Note: When you delete a review, it's soft-deleted for 90 days (same as account deletion). After 90 days, it's permanently removed.
Retention: 30 days (rolling backups)
We maintain automated database backups for disaster recovery. Your data may persist in backups for up to 30 days after deletion from the live system.
Note: Backups are encrypted, access-controlled, and used solely for disaster recovery (not for restoring individual user data after the 90-day soft delete period).
We use an automated cron job that runs daily to permanently delete data that has exceeded its retention period:
All deletions are logged to deletion_audit_log for SOC 2 compliance.
Before deleting your account, you can request a complete copy of your personal data:
Download all your personal data in machine-readable JSON format (Data Privacy Act - Right to Data Portability).
SettingsWe may retain certain data beyond standard retention periods if:
In such cases, we will notify you and resume normal deletion schedules once the exception no longer applies (unless prohibited by law).
For certain use cases, we may anonymize or pseudonymize data instead of deleting it:
Anonymized data is no longer considered personal data under the Data Privacy Act and is not subject to retention limits.
You have the right to:
We may update this Data Retention Policy to reflect changes in legal requirements or business practices. When we make material changes:
If you have questions about our data retention practices: