Data Retention & Deletion Policy
Version 1 · Effective 2026-09-21
This policy governs our current pre-launch submission process. The full policy set will be finalized before creator accounts open.
Effective date: 2026-09-21 · Last updated: 2026-10-12 Contact: [email protected] Operator: Revolution Unlocked ("we," "us"). Full operating-entity and ownership details will be published once the platform is ready for user invites and creator access, following legal review.
1. Purpose
Explains how long we keep the personal data described in our Privacy Policy, and how deletion works. This policy is the retention detail referenced there; it does not expand what we collect or why — see the Privacy Policy for that.
2. Our retention principle
We keep personal data only for as long as it serves the purpose it was collected for, plus any period we are legally required or permitted to retain it (tax, accounting, dispute defense, fraud/abuse prevention, or an active trust-and-safety or legal hold). We do not keep data indefinitely by default.
3. Retention periods
| Data category | Retained while | After that |
|---|---|---|
| Founding-creator intake submissions | Under active review, or until you withdraw your submission | Not-selected submissions are retained for a limited evaluation window, then deleted or fully de-identified, unless you ask us to delete them sooner |
| Email-update signups | You remain subscribed | Deleted within a reasonable period after you unsubscribe or ask us to delete it; we may keep a minimal record of your email address solely so we don't email you again |
| Investor applications | Under review, and for any conversation that follows | Applications we don't take forward are retained for a limited window, then deleted, unless you ask us to delete them sooner; records of an actual investment are kept as required by law |
| Account data (name, email, credentials, role, sign-in activity) | Your account is active | Deleted or anonymized within a reasonable period after account closure, subject to §4 |
| Creator content and metadata | Held on the Platform by your choice | Removed within a reasonable period after you remove it or close your account, subject to reasonable CDN/cache propagation delay and any active rights dispute |
| Usage & streaming activity (plays, sessions, device/IP) | Rolling operational window needed for discovery, fairness metrics, and abuse prevention | Aggregated or deleted after that window; aggregate fairness metrics are retained in de-identified form |
| Payment and payout records | As required to operate payouts and taxes | Retained per statutory financial record-keeping requirements (typically several years), independent of account status |
| SIREN (AI) interaction logs | Operational window needed to support the feature and investigate misuse | Deleted or de-identified after that window |
| Private preview-link visits (visit time, duration, source email, device, country, IP address, page activity, SIREN questions and answers) | 14 months from the visit for IP address, browser details and SIREN messages | IP address, browser details and SIREN message text deleted automatically; visit times, durations and page activity kept as activity records |
| Private investor deck-link visits (visit time, duration, link, device, country, IP address, slides viewed, downloads) | 14 months from the visit for IP address and browser details | IP address and browser details deleted automatically; visit times, durations and slide activity kept as activity records |
| Investor portal access and NDA acceptance (acceptance record, visit times, IP address, device, documents opened and downloaded) | For as long as the recipient's confidentiality obligations last, plus 3 years | Deleted at the end of the period; kept to establish, exercise or defend legal claims |
| Support, safety, and legal-hold records | Duration of the matter | Retained as long as needed to resolve it, defend a claim, or satisfy a legal obligation |
Copies of this data held in our internal review tools (see the Subprocessor Policy) follow the same periods. Where a specific statutory period applies (tax, financial records, or a legal hold), that period governs over the general windows above.
4. Deletion requests
You can request deletion of your personal data by emailing [email protected]. We verify the request against the account, submission, signup or application it relates to (see the Privacy Policy §9 for how we verify a request where no account exists), then act on it within one month, or sooner where required by law.
We may be unable to fully delete data that is subject to an unresolved trust-and-safety issue, an active legal hold, an unresolved payment/payout matter, or a legal retention obligation — where that applies, we will tell you why and delete the remainder.
5. Backups
Operational backups may retain deleted data for a limited additional period before they age out or are overwritten, consistent with normal infrastructure practice. We do not use backups to circumvent a deletion request.
6. Aggregated and de-identified data
Data that has been aggregated or de-identified so it no longer identifies you is not subject to this policy's deletion timelines, consistent with the Privacy Policy's transparency provisions.
7. Changes
We will notify material changes to this policy consistent with the Privacy Policy.