Data Retention Policy

Effective Date: Wednesday December 18th, 2024

At Dishio, we are committed to managing your data responsibly and transparently. This Data Retention Policy explains how long we keep your personal information, the reasons for retaining it, and how we ensure its secure deletion when no longer needed. Our retention practices comply with USA legal requirements, including the California Consumer Privacy Act (CCPA) and other applicable regulations. By using Dishio's services, you agree to the data retention practices outlined in this policy.

Types of Data We Retain

We retain the following categories of data, depending on your interactions with our services:
Personal Identifiable Information (PII)
  • Examples: Names, email addresses, phone numbers, business details, and payment information.
  • Retention Period: As long as your account is active or as necessary to fulfill the purposes outlined in our Privacy Policy.
Account and Transaction Data
  • Examples: Account credentials, billing records, payment history, and transaction details.
  • Retention Period: Up to 7 years to comply with legal, accounting, and tax obligations.
Technical and Usage Data
  • Examples: IP addresses, device information, browser type, and interaction logs.
  • Retention Period: Typically 2 years, unless required for security investigations or legal purposes.
Customer Data Collected Through Dishio Features
  • Examples: Data captured via Smart Sites, Menus, and Funnels, such as customer preferences and purchase history.
  • Retention Period: Until the client account is deactivated or upon request for data deletion.
Marketing and Communication Data
  • Examples: Email subscription records, communication preferences, and marketing campaign history.
  • Retention Period: Until you opt out or request data deletion, unless required for legal or compliance purposes.
Cookies and Tracking Data
  • Examples: Data collected through cookies, pixels, and similar tracking technologies.
  • Retention Period: Varies based on the type of cookie or tracking technology, typically up to 1 year.

Purposes for Retaining Data

We retain data for the following purposes:
  • Service Delivery: To provide, maintain, and improve our products and services.
  • Legal Compliance: To comply with legal, regulatory, and tax obligations.
  • Security: To protect against fraud, unauthorized access, and security breaches.
  • Business Operations: To support business processes such as billing, analytics, and customer support.
  • Marketing and Retargeting: To facilitate personalized marketing campaigns and retargeting efforts.
  • Dispute Resolution: To resolve disputes, enforce our agreements, and defend legal claims.

Data Deletion and Disposal

When data is no longer needed for the purposes outlined in this policy, we ensure its secure deletion or anonymization. Our data deletion practices include:
  • Automated Deletion: Data is automatically deleted after the retention period expires.
  • Manual Deletion: Upon account closure or verified request, personal data is manually deleted from our systems.
  • Secure Disposal: Data is permanently erased or anonymized to prevent reconstruction or identification.

Exceptions to Deletion

In some cases, we may need to retain data beyond the standard retention periods, including:
  • Legal Obligations: To comply with laws, regulations, or legal processes.
  • Dispute Resolution: To resolve disputes or enforce legal claims.
  • Security: To investigate security incidents or prevent fraud.

Your Rights and Choices

You have the following rights regarding data retention:
  • Right to Access: Request details about the data we hold and how long we retain it.
  • Right to Deletion: Request deletion of your personal data when it is no longer necessary for the purposes outlined in this policy.
  • Right to Restrict Processing: Request that we limit the use of your data under certain circumstances.
To exercise your rights, contact us at support@dishio.com. We will respond within the time frame required by law.

Data Security Measures

We apply the following security measures to protect retained data:
  • Encryption: Data is encrypted during transmission and storage.
  • Access Controls: Restricted access to authorized personnel only.
  • Regular Audits: Periodic reviews of data retention practices to ensure compliance.

Changes to This Data Retention Policy

We may update this Data Retention Policy periodically. Significant changes will be communicated via email or a notice on our website. Please review this policy regularly to stay informed.

Effective Date: Wednesday December 18th, 2024

Contact Us

If you have questions or concerns about this Data Retention Policy or your data privacy rights, please contact:support@dishio.io

By using our services, you agree to the data retention practices described in this policy.