QEMRA legal
Data Retention & Deletion Policy
This document explains the rules, responsibilities, and protections that apply when you use QEMRA.
Default retention schedule
| Data category | Default period |
|---|---|
| WhatsApp conversation/message history | 180 days |
| WhatsApp media and attachments | 90 days |
| Security and audit logs | 1 year |
| Automation decision/action audit records | 1 year |
| Internal error/diagnostic logs | 30 days |
| Deleted account/business data in active systems | scheduled for permanent deletion within 30 days |
| Residual deleted data in encrypted backups | up to 30 days through normal rotation |
| Inactive free accounts | eligible for deletion after 12 months inactivity + 30 days’ notice |
Consent and opt-out records
Consent and opt-out records may be kept while needed to demonstrate messaging permission, respect suppression preferences, resolve disputes or comply with law.
Deletion of an active marketing profile does not require QEMRA to forget that a person opted out if retaining a minimal suppression record is reasonably necessary to avoid messaging them again.
Billing and tax records
Invoices, tax records, payment references and accounting information may be retained for the period required by applicable tax, accounting, payment, fraud-prevention or legal obligations.
Legal holds and disputes
Specific data may be retained longer when reasonably necessary for litigation/arbitration, fraud investigation, security incidents, chargebacks, regulatory/law-enforcement requests, enforcement of legal rights or other lawful obligations.
Customer-controlled deletion
Where product controls allow, customers may delete contacts, messages, media, workflows or other information before the default period.
Some technical, audit, billing or suppression records may remain where a legitimate or legal reason requires them.
Account deletion
After account deletion:
- live service and access are disabled;
- active account/business data is scheduled for deletion within 30 days;
- backup copies age out through the normal backup lifecycle, normally within 30 days; and
- legally required records are retained only for their required purpose.
Data export
Before account deletion, customers should use the available export tools.
QEMRA supports CSV/JSON for structured data and ZIP archives for attachments/files where applicable.
Contact
Retention/deletion questions: noreply@qemra.vmnexa.co.in