| Data | Retention | Why |
|---|---|---|
| Customer account data (email, Stripe customer ID) | Active + 7 years after closure | Florida business records practice |
| API/tool usage metering | Retained per billing cycle | Billing accuracy, abuse investigation |
| Payment records | 7 years | IRS recordkeeping requirement |
| Security event logs | 1 year, then purged | Incident investigation window |
| Chat history | 30 days, then purged | Support/debugging only — not a system of record |
| Florida property/auction data | Indefinite | Public government records; no personal data |
You may request deletion of your personal data (email, payment-related identifiers) by emailing privacy@biddeed.ai. We will process deletion requests within 30 days.
Florida public-record data (property records, auction/case data) is sourced from county government systems and cannot be deleted from our copy — it was never personal to you; it is the county's own public filing.
Under Florida's Information Protection Act (FS 501.171), if a breach affects more than 500 Florida residents, we will notify the Florida Department of Legal Affairs and affected individuals within 30 days of determining the breach occurred.
Policy questions: privacy@biddeed.ai · Security incidents: security@biddeed.ai