Legal
This policy describes how long MarineOps retains different types of data, when and how data is deleted, and what rights subscribers have regarding their data. It applies to all data stored in connection with MarineOps subscriber accounts.
MarineOps retains data only for as long as necessary to provide the service, meet legal obligations, and resolve disputes. We do not retain data longer than needed. This policy establishes clear retention schedules for each data category and defines the deletion procedures that apply when retention periods end.
| Data Type | Retention Period | Deletion Trigger |
|---|---|---|
| Account and business profile | Duration of subscription + 90 days | Account cancellation or non-payment suspension |
| Staff member records | Duration of subscription + 90 days | Account cancellation |
| Customer records | Duration of subscription + 90 days | Account cancellation |
| Repair orders and job history | Duration of subscription + 90 days | Account cancellation |
| Invoices and payment records | Duration of subscription + 90 days | Account cancellation |
| Bank transaction data (Plaid) | Up to 24 months of history while active + 90 days post-cancellation | Account cancellation or bank disconnection |
| Plaid access tokens | Until bank account is disconnected | Subscriber disconnects bank account or account is cancelled |
| Uploaded photos and files | Per subscription plan + 90 days post-cancellation | Account cancellation |
| Authentication tokens | 90 days from issuance, or until logout | Expiration or explicit logout |
| Trusted device records | 30 days from creation | Automatic expiration or staff deactivation |
| MFA one-time codes | 10 minutes from generation or upon use | Automatic expiration or single use |
| Server access and error logs | 90 days | Automatic rolling deletion |
Bank account connections and transaction data deserve special attention given their sensitivity:
MarineOps retains up to 24 months of transaction history per connected bank account. Transaction descriptions (merchant names) are encrypted at rest. Balances are updated on each sync and the most recent values are stored.
If a subscriber manually disconnects a bank account from within MarineOps settings, the following occurs immediately:
Upon account cancellation, all Plaid access tokens are revoked and deleted within 24 hours. All transaction history and account data follows the standard 90-day post-cancellation retention schedule before permanent deletion.
When a subscription is cancelled — whether by the subscriber or due to non-payment — MarineOps retains all account data for 90 days. This window allows subscribers to:
We email the account owner at least 14 days before deletion, and again 3 days before, as a reminder to download their data or resubscribe. After the 90-day window closes, all subscriber data is permanently deleted from MarineOps systems. This deletion is irreversible. We strongly encourage subscribers to export any needed data before cancelling.
When data reaches the end of its retention period, MarineOps permanently deletes it from the active database. Encrypted backups may retain data for up to an additional 30 days as part of our standard backup rotation before being overwritten. After that point, data is unrecoverable.
Deletion requests submitted by subscribers (outside of normal cancellation) will be processed within 30 days of the request.
Shop owners can download all of their data at any time from Settings → Import / Export Data (and from the billing page for 90 days after cancelling), as a ZIP of CSV spreadsheets. Subscribers may also request an export by contacting [email protected]. We will provide data exports in a standard format (CSV or JSON) within 10 business days of the request.
Notwithstanding the schedules above, MarineOps may retain data beyond the standard retention period if required to do so by applicable law, legal process, or court order. In such cases, data will be retained only for the duration required and deleted promptly when the obligation no longer applies.
We may update this policy from time to time. Active subscribers will be notified of material changes by email. The effective date at the top of this page reflects the most recent revision.
For questions about data retention, deletion requests, or data exports: