Data Retention Policy

Last Updated: January 16, 2026

1. Active User Data

We retain your account data for as long as your account is active or as needed to provide you services.

2. Deleted Accounts

Immediate Deactivation

When you delete your account, your account is immediately deactivated and you can no longer log in.

Your personal information (email, name, password) is immediately anonymized. Some data is retained for legal and operational requirements as described below.

3. Legal & Operational Data Retention

The following data is retained to comply with legal obligations and operational requirements:

Time Clock Records

Retention: Retained as required by federal labor law (FLSA)

Clock-in/clock-out records are kept for payroll and compliance purposes, but are anonymized (no longer linked to your personal information) after account deletion.

Billing & Payment Records

Retention: Retained indefinitely for accounting, tax compliance, and dispute resolution

Security & Audit Logs

Retention: Retained indefinitely for security monitoring, fraud prevention, and legal compliance

Audit logs record security events, authentication attempts, data access, and system changes. These logs cannot be deleted even after account deletion to maintain security integrity and comply with legal obligations.

4. Your Rights

Under GDPR and CCPA, you can access, export, correct, or delete your data. Contact us at contact@xshift.ai

Data Retention Policy | How Long We Keep Your Data | XShift AI