Data Retention, Backup and Deletion Policy
Rules for retention, storage, backup, versioning, recovery, anonymization and deletion of data.
- Version
- 1.0
- Published on
- July 1, 2026
- Last updated
- July 1, 2026
- Next scheduled review
- July 1, 2027
1. Purpose
This Policy defines rules for the retention, storage, backup, versioning, recovery, anonymization and deletion of data at HABORA.
2. Scope
It covers records, users, permissions, properties, contracts, documents, attachments, images, spreadsheets, reports, dashboards, financial data, ESG, alerts, logs, integrations and settings.
3. Life cycle
Data may go through collection, validation, storage, processing, updating, versioning, backup, archiving, export, anonymization or deletion.
4. Retention
Data shall be kept as long as necessary for service provision, legal compliance, the contract, auditing, security, fraud prevention, support, backup and the defense of rights.
5. Backups
HABORA shall maintain backup routines aimed at service continuity and incident recovery, considering automation, redundancy, security, restoration testing and segregation whenever possible.
6. Recovery
Recovery shall depend on the availability, integrity and scope of the backups. Restoration may be full or partial and does not guarantee recovery of permanently deleted versions.
7. Versioning
Relevant documents and records may keep a change history, containing date, user, previous version, new version and reason where informed.
8. Deletion
Deletion may be logical or permanent. Soft delete shall be preferred to preserve auditing and recovery before permanent deletion, except for a contrary obligation or technical decision.
9. Anonymization
Data may be anonymized for statistics, security, improvement and operational analysis, provided it does not allow reasonable identification of data subjects.
10. Account closure
After cancellation, access may be terminated and data retained for the necessary period. Export may be requested where available, according to the plan and technical feasibility.
Contact
Questions, legal requests, privacy requests, formal communications and requests related to this policy should be sent to juridico@haborahub.com.br.
Updates
This policy may be revised to reflect legal, regulatory, technical, commercial or operational changes. The current version will remain available in the HABORA Compliance area. Material changes may require new acceptance by users, where applicable.