🗑️AngeloAI Data Retention & Deletion Policy

1. Purpose and Scope

AngeloAI maintains a data retention and deletion policy appropriate for a small, professional organization. This policy governs how we handle consumer financial data retrieved via the Plaid API, ensuring we balance the requirements of our high-precision analytics engine with the fundamental right to data privacy.

2. Retention Standards

Consumer financial data is retained only as long as needed to provide the analytics and portfolio monitoring services requested by the user. In alignment with our “Data Minimization” mandate, active account data is retained for the duration of the user’s relationship with AngeloAI.

3. Deletion Protocols

Consumer financial data is deleted under the following conditions:

• Upon Request: Users may request deletion of their data by contacting legal@angeloai.com. AngeloAI will initiate a permanent deletion of all associated financial records and revoke all active Plaid access_tokens within a reasonable timeframe following a verified request, typically not exceeding 30 days.
• Upon Bank Disconnect: If a user notifies AngeloAI that they have disconnected a linked bank account, cached data associated with that connection is purged from our environment following the same deletion request path.

4. Policy Governance

AngeloAI policies are reviewed periodically as the platform evolves, aligned with evolving consumer data-rights principles and industry security standards. We commit to a formal review of this policy every 180 days or upon major version releases of the Angelo Core.