1. Our approach
We keep personal data only as long as the purpose it was collected for needs it, plus any period the law requires. Where our systems do not yet delete data automatically, we say so below instead of promising a date. You can always ask us to delete your data earlier; see Data Rights and Grievance Redressal.
2. Planned retention periods
These periods are the targets we have set. Today we apply them by manual review. We are building scheduled deletion; until it is running, treat them as our intention and not as a guarantee.
- Business enquiries that did not become work: 12 months after the last meaningful contact.
- Unsuccessful job and internship applications: 12 months after the role is closed, unless you ask us to keep your details for other roles or the law requires otherwise.
- Newsletter subscriptions: until you unsubscribe. After that we keep only the minimum needed to avoid emailing you again and to show we honoured your request.
- Application and access logs: 180 days is our target. Actual log retention is being checked against our systems and applicable security rules.
- Client project data: for the life of the engagement and the period the agreement sets, then returned or deleted as agreed.
3. Records the law requires us to keep
Invoices, payment records and other accounting and tax documents are kept for the periods that accounting, GST and tax law require. We do not delete these early, even if you ask, but we use them only for those purposes.
4. Backups: what is in place today
- Our production database keeps point-in-time restore data for 7 days.
- It also keeps long-term backups: weekly copies for 4 weeks, monthly copies for 3 months and one yearly copy for 1 year.
- If you ask us to delete your data, it is removed from live systems. Copies inside backups cannot be edited and expire on the schedule above, so they can remain for up to a year. We do not use them to process your data again, other than to restore the system after a failure.
5. How deletion happens
When a retention period ends or a valid deletion request is accepted, we delete the data or remove what identifies you, unless a legal obligation, a dispute or a security investigation requires us to keep it. We record the reason when we keep something.
Version 2.0, last updated 3 November 2026. Incipit: info@incipit.in.