Data Deletion & Retention

Customers and users can request deletion of the data that belongs to them. This page explains how we handle those requests and how long we keep data.

Our approach

We retain data only while there is a continued, valid reason to store or process it. Customers and users have the right to request deletion of their information by making a request. We authenticate every request, evaluate it for legitimacy, and honor it in accordance with applicable data protection law and our contractual commitments.

Where Risely processes personal data on behalf of a customer organization, we act as a data processor and honor deletion in line with that customer’s documented instructions.

Timelines and what is deleted

• Verified deletion requests are completed within 30 days.
• By default, deletion removes all identifiable personal information, such as names, email addresses, and user profile details. De-identified, aggregated data may be retained for analytics purposes unless full deletion is requested, in which case all associated data is deleted.
• On contract termination, customer data is deleted within 30 days of the termination date or the customer’s request.
• Data held in encrypted backups is removed as backup snapshots expire under our backup retention schedule.
• Where appropriate and permitted by law and customer contracts, we may anonymize personal data rather than delete it.

Requesting deletion

To request deletion of your data, or if you have any questions about this policy, contact us at [email protected].