Data Retention Policy
Last updated: June 23, 2026
This Data Retention Policy explains how long Devopstick retains different categories of your personal data, why we retain it, and what happens when retention periods expire. This policy supplements our Privacy Policy and is maintained in compliance with the GDPR, UK GDPR, and the Information Technology Act, 2000 (India).
Retention Schedule
| Data Category | Retention Period | Basis |
|---|---|---|
| Account profile data (name, email, username, bio) | Duration of account + 30 days post-deletion | Contract performance |
| Authentication tokens (JWT, cookies) | Session duration or until logout/expiry | Security / Legitimate interest |
| Learning progress (lessons completed, enrollments) | Duration of account; deleted with account | Contract performance |
| Badge & achievement records | Duration of account; deleted with account | Contract performance |
| User-submitted content (lessons, blog posts) | Until removed by admin or user account deletion | Contract / Legitimate interest |
| Security & audit logs (login events, actions) | Up to 24 months | Legal obligation / Security |
| Contact form submissions | Up to 12 months from submission | Legitimate interest (support) |
| Cookie consent records | 12 months (refreshed on re-consent) | Legal obligation (GDPR Art. 7) |
| Anonymised/aggregated analytics data | Indefinitely (no personal identifiers) | Legitimate interest |
| Backup data | Up to 90 days after deletion request is processed | Operational necessity |
Account Deletion
You can permanently delete your account at any time. To do so:
- Go to your Profile page.
- Scroll to the Delete Account section.
- Enter your current password and type
DELETEto confirm. - Submit the form. Your account and associated personal data will be removed from our production database immediately.
Backup copies of data may persist for up to 90 days following deletion for disaster recovery purposes, after which they are permanently purged.
Data Erasure Requests
If you wish to request erasure of your data without going through the in-app deletion flow (for example, if you no longer have access to your account), please contact us:
- Email: ychandra0405@gmail.com
- Subject line:
Data Erasure Request — [your registered email]
We will acknowledge your request within 5 business days and complete the erasure within 30 days of verification, in line with GDPR Article 17.
Exceptions to Deletion
In certain circumstances, we may be required to retain some data even after an account deletion request. This includes:
- Data required to comply with a legal obligation (e.g., court orders, regulatory requirements).
- Security and audit logs retained for fraud investigation within the 24-month window.
- Anonymised data that can no longer identify you (this is not considered personal data under GDPR).
We will always inform you if a legal basis prevents full erasure of your data within the requested timeframe.
Questions
For any questions about this policy or how we handle your data, please contact us at ychandra0405@gmail.com or visit our Contact page.