Tavro AI — Data Retention & Deletion Policy
Version 1.0 | Effective: July 2026
1. Purpose
This policy defines how Tavro AI retains, manages, and deletes customer data to ensure compliance with GDPR and other applicable privacy regulations.
2. Scope
This policy applies to all customer data stored by Tavro Agent BizOps, including:
Account & profile information — name, email address, company name, user role
Agent metadata — agent cards, configurations, risk assessments created by the customer
3. Retention Period After Account Termination
When a customer account is terminated (by the customer or by Tavro), data is retained for 90 days from the termination date.
This grace period allows customers to:
Request a copy of their data before deletion
Resolve any outstanding disputes or billing queries
Restore their account if termination was unintentional
After 90 days, all associated customer data is permanently deleted from Tavro’s systems.
4. Customer-Initiated Deletion Requests
Customers may request deletion of their personal data at any time by contacting: info@tavro.ai
Tavro will action verified deletion requests within 30 days of receipt, regardless of the account termination date.
5. Data Deletion Process
Upon account termination or deletion request:
Step Action Timeline
1 Account deactivated, customer notified Day 0
2 Data export available on request Days 1–90
3 All customer data permanently deleted Day 90
4 Deletion confirmed to customer on request Within 5 days of deletion
6. Responsibility
Data deletion requests and the deletion process are managed by:
Tavro Customer Support — info@tavro.ai
7. Exceptions
Data may be retained beyond 90 days only if:
Required by applicable law or regulation
Subject to an active legal dispute or audit
Explicitly requested by the customer in writing
8. Review
This policy is reviewed annually or when significant changes to data processing occur.
Policy Owner: Tavro AI
Contact: info@tavro.ai