Data Retention and Disposal Policy

Effective Date: February 22, 2026

1. Purpose

This policy defines the schedule and procedures for the retention and secure disposal of consumer and business data handled by Break Space Inc. dba Pyract, ensuring compliance with applicable data privacy laws.

2. Data Retention

Data is retained only as necessary and deleted or anonymized when no longer required. We do not hold consumer financial data, audio recordings, or employee data indefinitely. Data is retained only as needed and securely deleted.

3. Data Disposal and Destruction

When data reaches the end of its required retention period, or when a valid deletion request is processed, the data is securely destroyed. Electronic records are permanently deleted from active databases, and associated backups are overwritten or aged out according to our standard backup lifecycle.

4. User Deletion Requests

Consumers and merchants have the right to be forgotten. You may request access, correction, deletion, or withdrawal of consent at any time by contacting privacy@pyract.com. Upon receiving a verified request, we will securely delete or anonymize the associated data within a reasonable timeframe, unless retention is strictly required by law.

5. Policy Enforcement and Review

This policy is enforced programmatically through our database management systems and manual administrative reviews. Security and privacy procedures are reviewed periodically to ensure ongoing compliance with Canadian and international privacy regulations.