← Back to Privacy Policy
1. Purpose
This policy defines how Iron Amethyst Holdings, LLC retains and disposes of personal and financial data in compliance with applicable privacy laws including CCPA and US federal and state regulations.
2. Scope
All personal and financial data collected, stored, or processed including data from third-party APIs such as Plaid.
3. Retention Principles
- Data retained only as long as necessary for its purpose.
- Retention periods defined by business need, legal obligation, or regulatory requirement (whichever is longest).
- Data no longer needed is securely deleted or anonymized.
4. Retention Periods
- Financial transaction data: 7 years (US tax and financial recordkeeping requirements).
- Account and identity data from Plaid: Duration of active service, then deleted within 90 days of termination.
- System logs and access records: 12 months, then deleted.
- Other personal data: No longer than 2 years from last use unless law requires longer.
5. Data Disposal
- Digital data securely deleted on encrypted volumes.
- API-sourced data: Plaid connections terminated via dashboard, local data deleted within 30 days.
- Backups purged on same schedule as primary data.
6. User Deletion Requests
Requests fulfilled within 30 days. Contact: newyork1@gmail.com. Exceptions where retention is required by law.
7. Policy Review
Reviewed annually.
Effective Date: April 1, 2026
← Back to Privacy Policy