Skip to main content
Upon contract termination, the following data deletion process is executed: (1) All client data remains accessible within the system for a defined post-termination retention period (typically 30-90 days, as specified in the contract) to allow the client to export any required data.
Upon contract termination, the following data deletion process is executed: (1) All client data remains accessible within the system for a defined post-termination retention period (typically 30-90 days, as specified in the contract) to allow the client to export any required data. (2) After the retention period, all client data is encrypted at rest using AES-256 with a unique client-level key. The encryption key is securely destroyed, rendering the data permanently inaccessible. (3) Data is purged from production systems, and a certificate of data destruction can be provided upon request. (4) Backup copies are purged in accordance with the backup retention cycle. The process aligns with ISO 27001:2022 controls and DPDPA requirements for data disposal. Learn more: Xoxoday Plum Help Centre

What is Xoxoday Plum's data retention and deletion policy?

Xoxoday Plum follows a configurable, policy-driven data retention and deletion framework compliant with GDPR, CCPA/CPRA, and applicable regional…

What personal data does Xoxoday Plum collect and process?

Xoxoday Plum processes identity, transactional, and behavioral data with AES-256 encryption, role-based access controls, and geo-specific storage…