1. Why this policy exists
We should not keep your data longer than the job needs. The DPDP Act calls this storage limitation, and it is how we run the service. This page explains what we keep, for how long, and how we delete it.
2. Your files: temporary working copies
During a project we may hold temporary working copies of your files while we consolidate, migrate and verify them. These copies are not an archive and not a backup service. The final copy is the one at the destination you chose.
| What | How long | What happens next |
|---|---|---|
| Temporary working copies of your files | The retention period agreed in your project. Default: 30 days after the project is completed (configurable; the period for your project is stated in your quote). | Securely deleted; deletion certificate issued. |
| Source devices | Until you collect them, or the agreed return date. | Returned to you with custody record. |
| Intake photos of devices | Life of the project record, then as in the row below. | Removed with the project record when no longer needed. |
| Contact, quote, payment and custody records | As long as needed for support, disputes and legal or tax obligations. | Deleted or anonymised when no longer needed. |
3. Changing the retention period
If you want a longer or shorter period, tell us before the project starts so it is written into the quote. A shorter period is possible if you have reviewed everything and are satisfied. A longer period may carry a storage charge, which we will state upfront. We will not extend the period without telling you.
4. Reminders and your review window
We send a reminder before the retention period ends, so you have time to check your migrated data. Please verify your data at the destination before the deletion date, and before destroying or erasing any source device. Once working copies are deleted, we cannot restore them.
5. How we delete
- Working copies are deleted from our storage using secure deletion methods suited to the media.
- Where a working copy sits on a drive that we will reuse, the drive is securely erased before reuse.
- Deletion is recorded in our project history.
6. Deletion certificate
After deletion, we issue a deletion certificate to you. It states the project reference, what was deleted, the date, and the retention period that applied. It does not list your file names.
7. Asking for earlier deletion
You may ask us to delete your working copies earlier by writing to aj@kamyab.co.in. Once you confirm that you have verified your data, we will do so and issue the certificate. You may also ask us to erase your personal information under the DPDP Act; we will do this unless we must keep certain records, such as invoices, by law.
8. Exceptions
We may keep data longer only if the law requires it, or if there is an active dispute that needs the records. We will tell you if that happens, unless the law prevents us.
9. Backups of our own systems
Our operational database may have routine technical backups, which hold only the operational metadata described in the Privacy Policy, never your files. These roll off on a regular schedule.
10. Questions
Write to aj@kamyab.co.in with your KDC reference number. See also the Data Handling Policy.