Data Retention Policy

Overview

Paymarka keeps personal information and commercial records only for the period required for the purpose for which they were collected, including service delivery, legitimate account administration, contractual obligations, security, accounting, legal compliance and resolution of disputes. Different categories of information may have different retention periods.

Where deletion is requested, we assess which records can be deleted and which must be retained for an applicable legal obligation, dispute or other lawful reason. We restrict further use of information retained for a limited purpose where appropriate.

Who decides

Paymarka decides how long to keep its own account, billing, security, support and service-management records. A business using Paymarka ordinarily decides how long to keep its client and commercial records, and Paymarka keeps them on its behalf. That business is responsible for asking us to keep or delete them in a way that fits its own legal, accounting and evidence obligations.

What we keep, and for how long

Accounts and sign-in: kept while the account or workspace is active. Sign-in sessions expire automatically and end when you sign out, reset your password or delete the account. Verification, password-reset and invitation links expire after a short period.
Deal drafts started on the website: saved only in your own browser until you clear them or turn them into a deal.
Commercial records (clients, deals, proposals, negotiations, contracts, signatures, invoices, payments, receipts, generated PDFs, payment proof and audit records): kept while the workspace is active, and afterwards for as long as reasonably needed for the agreement, accounting, tax, disputes, fraud prevention, security and legal claims.
Messages and support: email delivery records and contact or sales requests are kept for follow-up, service administration, abuse prevention and accountability.
Sample pack requests: the email address and request date are kept to prevent misuse of the form and, if you agreed to updates, to send them until you ask us to stop. You can ask us to delete your request at any time.
Free proposal drafts on the home page: not saved by Paymarka. The IP address used to limit free drafts is held in memory for up to a day.
Security and diagnostic records (request logs, audit and security events, error records, product analytics): kept only as long as needed for security, reliability, fraud prevention, improving the service and legal accountability.
Provider copies and backups: our email, payment, storage, AI, analytics, hosting and backup providers may keep copies under their own retention rules.

Accepted proposals, signed contracts, payment evidence, receipts and audit events are kept intact where they are needed as evidence. A correction is recorded as a new entry rather than by quietly rewriting the record.

Deleting a workspace

Workspace owners may request deletion using the account settings or by contacting support. Deleting a workspace removes its records from ordinary access, signs out its sessions, and stops any active Paymarka subscription. Files we store for the workspace are scheduled for deletion after a 30-day grace period, which lets billing cancellation and file clean-up finish.

Some backups, billing references, security logs, files held by service providers or legally required records may take longer to delete or remain for a lawful retention period. Deleting a Paymarka account does not delete copies independently held by a client, signer, bank or other third party.

Client links and files

Client links stop working after they expire or are withdrawn. The records and files linked to them follow the periods above. Keeping a record as evidence does not allow it to be used for an unrelated new purpose; its use is limited to the reason it is kept.

Requests and legal holds

To ask for deletion, access, correction, a copy, restriction or objection: for client and commercial records, contact the business that holds them in its workspace first. For Paymarka's own records, use the privacy contact form. We may need to confirm your identity, and a request may be limited to protect another person's rights or an evidence obligation.

Where records must be preserved for a dispute, investigation or legal requirement, ordinary deletion is paused for those records only, and resumes when the reason ends.