1. Standard schedule
- Standard period
- While active; deletion/anonymisation target within 30 days after a valid request and active duties are resolved
- Reason
- Contract, security, request completion
- Standard period
- Nonfinancial transaction evidence: at least 5 years from acquisition where PPMSE duties apply; other operational material reviewed 3 years after completion, subject to licence/hold
- Reason
- Service evidence, content rights, disputes, audit
- Standard period
- 10 years in Indonesia
- Reason
- Tax and bookkeeping duties
- Standard period
- 12 months unless linked to an incident
- Reason
- Security, investigation, abuse prevention
- Standard period
- 2 years after resolution
- Reason
- Service continuity and complaint handling
- Standard period
- 5 years after the relationship ends, or longer if needed for a claim
- Reason
- Consent and compliance evidence
- Standard period
- Up to 35 days after active-system deletion
- Reason
- Disaster recovery and system integrity
- Standard period
- Linkable events: reviewed no later than 12 months; account/campaign/session links and unstructured metadata removed on eligible deletion. Longer retention only for genuinely aggregate, non-identifying statistics.
- Reason
- Aggregate analytics and service improvement
- Standard period
- While connected; removed from active systems when the user disconnects, subject only to backup rotation and a documented legal or security hold
- Reason
- Operate the user-requested integration and honour withdrawal
- Standard period
- Challenge data until expiry or verification; verification evidence while the account is active; non-content security events under the security-log period
- Reason
- Verify phone ownership, prevent abuse, and evidence consent
2. When a period starts
A period runs from the relevant event: account closure, campaign completion, transaction date, ticket resolution, or consent record. Where multiple rules apply, we use the necessary documented period.
3. Exceptions and legal holds
Held data has restricted access. The ordinary disposal schedule resumes when the reason ends.
- Dispute, chargeback, audit, fraud, or security investigation.
- Court, regulator, tax, or law-enforcement order.
- Protection of user or third-party rights and safety.
- Ongoing contract or content-licence duty.
4. Deletion and anonymisation
Eligible operational data is deleted or minimized. Linked account tombstones and transaction archives are pseudonymous personal data, remain subject to data protection, restricted access and retention, and are not anonymous simply because the profile was removed.
Backups follow a maximum 35-day target, with daily pruning and no monthly copies extending the period. Cycle failures or legally required held copies must be recorded and addressed. Before a restore enters operation, Operations reapplies the latest deletion and withdrawal ledger and verifies the result.
5. Schedule review
The schedule is reviewed when products, vendors, contracts, or laws change. Questions may be sent to hello@teamfluencer.id.
Document history
- Current version
- 2.2 · 13 October 2026
- Material changes
- Clarified data, AI, retention, deletion, contract, and refund terms.