Legal

Data Retention Policy

Last updated: February 18, 2026

Introduction

This Data Retention Policy explains how long Best Odds Corp retains personal information collected through our services, including data collected via social sign-in providers (Google, Facebook), and the criteria we use to determine retention periods.

This policy complies with applicable data protection laws and the requirements of third-party authentication providers. For general privacy information, please see our Privacy Policy.

1. Data Retention Principles

We retain personal information only for as long as necessary to:

  • Fulfill the purposes for which it was collected
  • Provide and maintain our services
  • Comply with legal, regulatory, tax, and accounting obligations
  • Resolve disputes and enforce our agreements
  • Protect against fraudulent, abusive, or illegal activity
  • Maintain business records and analytics

When personal information is no longer needed for these purposes, we securely delete or anonymize it in accordance with this policy.

2. Specific Retention Periods

2.1 Account and Profile Information

Retention Period: Duration of active account + 3 years after account closure or last activity

Data Types: Name, email address, phone number, company information, profile details, social sign-in credentials (Google, Facebook)

Justification: Required to maintain service continuity, comply with tax and accounting regulations, and resolve potential disputes or claims

2.2 Social Sign-In Data (Google, Facebook)

Retention Period: Duration of active account + 90 days after account deletion request

Data Types: OAuth tokens, social profile identifiers, email address from social provider, profile picture URL, public profile information

Justification: Required for authentication, account recovery, and compliance with Google and Facebook platform policies

Note: OAuth access tokens are automatically revoked upon account deletion. Refresh tokens are deleted within 90 days. We do not store social media passwords.

2.3 Transaction and Payment Records

Retention Period: 7 years from date of transaction

Data Types: Invoices, payment records, billing addresses, transaction history, purchase orders

Justification: Required by tax laws, accounting standards, and financial regulations. Essential for audit trails and dispute resolution

2.4 Project and Service Delivery Data

Retention Period: Duration of project + 5 years after project completion

Data Types: Project briefs, deliverables, communications, work product, client feedback, contracts, statements of work

Justification: Required for warranty obligations, intellectual property protection, professional liability defense, and business continuity

2.5 Marketing and Communication Data

Retention Period: Until opt-out/unsubscribe + 30 days for processing

Data Types: Email subscription preferences, newsletter history, marketing campaign interactions, consent records

Justification: Required to honor opt-out requests and maintain suppression lists to prevent unwanted communications

2.6 Website Analytics and Usage Data

Retention Period: 26 months from collection date

Data Types: IP addresses, browser information, page views, session data, cookie identifiers, device information

Justification: Required for website optimization, security monitoring, and compliance with Google Analytics data retention policies

2.7 Customer Support and Communications

Retention Period: 3 years from last communication

Data Types: Support tickets, email correspondence, chat logs, phone call records, feedback submissions

Justification: Required for quality assurance, dispute resolution, and continuous service improvement

2.8 Security and Fraud Prevention Data

Retention Period: 5 years from incident date or resolution

Data Types: Security logs, access logs, authentication attempts, fraud detection data, incident reports

Justification: Required for security monitoring, fraud investigation, legal proceedings, and regulatory compliance

2.9 Legal and Compliance Records

Retention Period: Duration of legal obligation + applicable statute of limitations (typically 7-10 years)

Data Types: Contracts, legal notices, compliance documentation, consent records, data processing agreements

Justification: Required by law, regulatory requirements, and for legal defense purposes

3. Data Deletion Procedures

3.1 Automated Deletion

We implement automated systems to identify and delete personal information that has exceeded its retention period. These systems run on a regular schedule and include:

  • Monthly reviews of account activity and retention status
  • Automated deletion of expired session data and temporary files
  • Quarterly purges of marketing data for unsubscribed users
  • Annual reviews of archived project data and communications

3.2 User-Requested Deletion

You may request deletion of your personal information at any time by:

We will process deletion requests within 30 days, subject to legal retention requirements. Some information may be retained in backup systems for up to 90 additional days.

3.3 Secure Deletion Methods

When deleting personal information, we use secure methods including:

  • Permanent deletion from active databases and systems
  • Overwriting of deleted data to prevent recovery
  • Removal from backup systems within 90 days
  • Anonymization of data required for statistical or analytical purposes
  • Secure destruction of physical records containing personal information

4. Exceptions to Deletion

We may retain certain personal information beyond the standard retention periods when:

  • Legal Obligation: Required by law, regulation, or court order
  • Pending Litigation: Subject to ongoing or anticipated legal proceedings
  • Fraud Investigation: Involved in active fraud or security investigations
  • Debt Collection: Related to outstanding payments or financial obligations
  • Contractual Obligation: Required under existing contracts or service agreements
  • Legitimate Business Interest: Necessary for compelling business purposes that override deletion requests

In such cases, we will inform you of the reason for extended retention and the expected retention period.

5. Social Sign-In Provider Compliance

5.1 Google Sign-In Compliance

Our data retention practices comply with Google's OAuth 2.0 policies and requirements:

  • We only request access to Google user data necessary for authentication and service delivery
  • Google OAuth tokens are stored securely and encrypted
  • Access tokens are automatically revoked upon account deletion
  • We do not share Google user data with third parties except as disclosed in our Privacy Policy
  • Users can revoke access at any time through their Google Account settings

5.2 Facebook Login Compliance

Our data retention practices comply with Facebook Platform Policies:

  • We only request Facebook permissions necessary for authentication
  • Facebook user data is deleted within 90 days of account deletion or access revocation
  • We comply with Facebook's data deletion callback requirements
  • Users can manage permissions and delete data through Facebook settings
  • We provide a data deletion status check endpoint as required by Facebook

5.3 Revoking Social Sign-In Access

You can revoke our access to your social sign-in data at any time:

6. Data Anonymization

When personal information is no longer needed for its original purpose but has value for statistical, analytical, or research purposes, we may anonymize it. Anonymized data:

  • Cannot be used to identify individuals
  • Is aggregated with other data to prevent re-identification
  • Has all direct and indirect identifiers removed
  • May be retained indefinitely for business intelligence and service improvement

Anonymized data is not considered personal information and is not subject to data subject rights or deletion requests.

7. Updates to This Policy

We may update this Data Retention Policy to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated through:

  • Email notification to registered users
  • Prominent notice on our website
  • Updated "Last updated" date at the top of this policy

Continued use of our services after policy updates constitutes acceptance of the revised retention practices.

8. Contact Us

If you have questions about our data retention practices or wish to request deletion of your personal information, please contact us:

Best Odds Corp

4575 Dean Martin Dr. Unit 1501

Las Vegas, NV 89141

USA

Email: [email protected]

Phone: (702) 555-1234

Contact Form: bestoddscorp.com/contact