Data Retention & Record Keeping Policy
Comprehensive schedule governing data storage life cycles, statutory audit retention periods, and automated data purging across TradeNov.
In accordance with Section 8(7) of the Digital Personal Data Protection Act, 2023, a Data Fiduciary must erase personal data as soon as the purpose for which it was collected is no longer being served, unless retention is required for compliance with any law for the time being in force in India. This policy establishes our official Data Retention Schedule.
1. Official Statutory Data Retention Schedule
The following schedule defines the exact retention horizons for each data category collected across TradeNov:
| Data Category | Retention Period | Governing Statutory Authority | Post-Retention Action |
|---|---|---|---|
| Active Account Profile (Name, Email, Mobile) | Duration of active account + 30 days post-closure | DPDP Act 2023 (Section 8(7)) | Permanent Scrubbing |
| Tax Invoices, Wallet Top-Ups & Banking Payouts | 8 Financial Years | Income Tax Act 1961 (Sec 44AA) & CGST Act 2017 (Sec 36) | Secure Vault Purge |
| Marketplace Tip & Signal Audit Logs | 5 Years | TradeNov Platform Integrity & Transparency Rules | Cryptographic Erasure |
| Server Access & Network Security Logs | 180 Days | CERT-In Cyber Security Directions (Sec 70B IT Act) | Automated Log Rotation |
| Advertising Campaign Attribution & Leads | 12 Months | DPDP Act 2023 Purpose Limitation | Automated Database Wipe |
| Inactive / Abandoned Accounts | 24 Months of Inactivity | TradeNov Inactive Account Protocol | Account Deletion & Purge |
2. Storage Architecture & Cold Vault Isolation
Holds real-time credentials, live signal queues, and active notifications. Directly accessible by authenticated user sessions with fast read/write replication.
Holds archived financial audit records, GST ledgers, and trade setup audit records. Isolated from live web traffic, encrypted with separate AES-256 keys, and inaccessible for marketing or user profiling.
3. Automated Data Destruction & Scrubbing Protocol
Once a retention threshold is reached:
- Zero-Overhead Nightly Purging: Automated database maintenance crons scrub expired sessions, orphaned telemetry tokens, and temporary files nightly.
- Cryptographic Shredding: Database rows are overwritten and de-indexed, rendering recovery mathematically impossible under NIST 800-88 sanitization standards.
- Backups Expiration: Database snapshots older than 30 days are automatically rotated and permanently purged from geo-redundant storage.
4. Data Retention Inquiries & Grievance Desk
For inquiries regarding data retention schedules or to request a record retention audit statement:
