Data Retention Policy

1. Introduction

PagerTree is committed to storing customer data only for as long as necessary to provide our services, meet regulatory or contractual obligations, and support operational needs. This Data Retention Policy outlines how long PagerTree retains data, how data is securely deleted, and the principles used to determine retention timelines.

2. Scope

This policy applies to:

• All customer data processed or stored by PagerTree
• All systems, backups, logs, and databases under PagerTree’s control
• All employees, contractors, and third parties with access to customer data

This policy does not cover internal HR or personnel data.

3. Retention Principles

PagerTree follows these core data retention principles:

• Retain only what is necessary
• Keep data for the minimum period required
• Securely delete or anonymize data when no longer needed
• Ensure all retention and deletion actions follow secure, auditable processes

4. Default Retention Periods

4.1 Alert & Notification Data

PagerTree retains alert and notification content and metadata for up to 1 year to provide customers with full visibility into alert history. After 1 year, this data is automatically deleted.

4.2 Account Information

Account and billing information is retained:

• For the duration of the customer’s use of PagerTree, and
• For up to 7 years afterward to comply with financial and tax-related obligations.

4.3 System & Security Logs

Operational, infrastructure, and security logs are retained for 3 days, unless required longer for investigations or compliance.

4.4 Backups

Encrypted backups follow a rolling retention schedule of up to 30 days.
Data in backups is not modified; deleted data naturally ages out as backups expire.

4.5 Support Communications

Support tickets, chats, and related emails are retained for up to 3 years for customer service, troubleshooting, and auditability.

5. Customer Data Deletion Requests

Authorized account owners may request data deletion. Upon verification:

• Relevant data is deleted or anonymized
• Backups expire naturally based on their retention period

6. Secure Deletion Processes

PagerTree uses secure deletion practices, including:

• Removal from active databases
• Sanitization of file storage
• Automated expiration of encrypted backups
• Verification checks to ensure deletion integrity

7. Enforcement

Non-compliance with this policy may result in restricted access, disciplinary action, or termination of contracts for third parties.

8. Review and Maintenance

This policy is reviewed annually or when significant changes occur in data handling practices, retention requirements, or applicable regulations.