Data Deletion & Retention Policy

This policy explains how to have data deleted from Risper CRM - TAX, what happens to an account's data when a subscription ends, and how long anything is kept. It is published by RAIMS Digital Technologies SP LLC and forms part of our Terms & Conditions.

1. Ask us to delete your data

Send a request from the email address on the account to privacy@rispercrm.tax with the subject "Data deletion request", telling us:

• the account or company name, and the email address you sign in with;
• whether you want the whole account deleted, or only specific records, and if so which;
• if you are asking as an individual whose data sits inside someone else's account, the name of the business that holds it.

We verify that the request really comes from someone entitled to make it before we act — a deletion cannot be undone, and acting on an unverified request would itself be a breach.

2. What happens, and how quickly

• Acknowledgement — within 5 business days.
• Verification — we confirm your identity and authority.
• Deletion from the live system — within 30 days of a verified request.
• Deletion from backups — encrypted backups roll on a fixed cycle and are overwritten within a further 90 days. Data in a backup is not restored to live use in the meantime except to recover from a disaster, and if a restore did occur we would re-apply the deletion.
• Confirmation — we write to you when it is done.

3. In-app deletion, and the recycle bin

You do not have to write to us for routine deletions. Users with the right permission can delete records inside the Service. Deleted records may go to a recycle bin so that an accidental deletion can be reversed; items in the recycle bin are permanently removed after the retention window shown there, or immediately if you empty it. Emptying the recycle bin is irreversible.

4. What happens when a subscription ends

Ending a subscription does not delete your data immediately — a lapsed payment is usually a lapsed card, not a decision to lose the business's records.

• Days 0–14 after a failed or missed payment — the account continues, and we notify you.
• Suspension — access to the application is blocked while the data is kept intact. You can restore it in full by paying.
• Read-only or export window — where offered on your plan, you keep the ability to sign in and export your data.
• Deletion — 90 days after the subscription ends or the account is closed, the account and its data are permanently deleted, unless you have asked us in writing to delete it sooner or to hold it longer.

Export before you go. Once deletion has run, the data cannot be recovered by us or by anyone else. Use the export features while the account is still active.

5. What we keep after deletion, and why

A small amount of information survives a deletion request because the law requires it or because deleting it would defeat the deletion itself:

• Invoices, receipts and accounting records — kept for the period required by UAE tax legislation (currently at least five years from the end of the relevant tax period).
• A suppression record — the minimum needed to remember that you asked not to be contacted, so that we do not contact you again.
• Security and audit records — records of the deletion itself, and security logs required to defend the platform, kept for the standard log period.
• Anything subject to a legal hold — where a claim, investigation or lawful order requires it to be preserved, until that ends.

Data retained under this section is not used for any other purpose.

6. If your data is inside someone else's account

If you are a client, employee or contact of a business that uses Risper CRM - TAX, that business is the controller of your data and we hold it as its processor. Ask that business directly. If you cannot reach them, write to us and we will pass the request on and support them in answering it, but we cannot delete a customer's records on the instruction of a third party.

7. Connected third-party services

If you connected the Service to another provider — an accounting platform, a messaging number, a payment gateway — data already sent to that provider lives under their control and their retention policy. Deleting your account here does not delete it there; ask them separately.

8. Self-hosted deployments

Where the software runs on infrastructure you control, we hold none of the data and cannot delete it. Deletion is carried out by you on your own systems.

9. Contact

RAIMS Digital Technologies SP LLC

Data deletion requests: privacy@rispercrm.tax