Data Retention and Deletion Policy

Retention schedule

• Active account and seller profile: for the account lifetime.
• Orders, payments, ledger journals, fees, settlements, refunds, chargebacks, disputes and associated audit evidence: ordinarily seven years after the transaction or closure.
• Policy acceptance and legal notices: seven years after the relationship ends.
• Support and operational communications: up to three years unless linked to a longer-lived dispute.
• Security, webhook and access logs: ordinarily 12 to 24 months, longer for an active investigation.
• Unpublished or archived product content: removed or de-identified within 90 days where not required for a transaction.
• Backups: expire under the managed backup lifecycle and are not restored solely to retrieve deleted content.

Account closure

Sign-in is disabled, public products are archived and profile contact data is de-identified where feasible. Financial records remain access-restricted and are used only for accounting, customer protection, fraud, disputes, legal compliance and enforcing rights.

Legal holds and exceptions

Deletion is suspended for records reasonably connected to litigation, regulatory requests, fraud investigations, unpaid obligations, chargebacks or security incidents. Data may also be retained longer where tax, corporate, payment-provider or other law requires it.

Secure disposal

At expiry, records are deleted, anonymised or aggregated using available managed-service controls. Orderly limits deletion permissions, preserves immutable ledgers and records sensitive administrative actions.