Data Retention Policy

Retention approach

We retain information for the purposes described in our Privacy Policy, including active service delivery, revisions, client access, correspondence, security and necessary business or legal records. The appropriate period depends on the record and the purpose for retaining it.

Submitted client documents, completed work and conversation records do not currently have a universal automatic deletion date. Completing a project, reading a message or signing out does not automatically erase them. Contact us to request removal or clarification about a specific record.

Resumes, assessments and delivered documents

Submitted resumes, quotations, ATS results, intake information, draft/final documents, annotations, approvals and revisions remain associated with your service history while needed to provide or support the engagement, resolve queries or meet lawful recordkeeping needs.

Files are held in private application storage, but separately emailed attachments or files you download create additional copies. Removing a portal copy does not recall an email or erase a copy held by you or another recipient. Keep your own copy of documents you want to retain.

Accounts, conversations and email

Account information, portal messages, advisor transcripts, support requests and service email history may be retained with your client record to maintain continuity and address service questions or disputes.

Email may also exist in the sending and receiving mailboxes. A deletion request must consider both application records and relevant mailbox copies. We will explain any remaining retention requirement or technical limit rather than promise that one action removes every copy.

Current access and temporary-upload expiry

The following periods describe current access validity, not a promise that every related database row or backup is physically erased at that moment.

• Email verification, login and password-reset codes generally expire after 10 minutes. Successfully used one-time codes are consumed or cleared by the relevant flow.
• Client sign-in sessions expire after 30 days. Admin browser sessions expire after 12 hours and can also be revoked. Signing out or resetting a password can invalidate sessions earlier.
• Native admin device registration expires after 30 days unless renewed. Notification permission is managed on the device.
• Temporary direct-upload receipts expire after 15 minutes; upload authorizations can expire sooner. Consumed temporary files are queued for immediate cleanup after processing. Expired or abandoned pending uploads are eligible for background cleanup, with failed deletions retried when that process runs. This does not delete the submitted document saved in the permanent client record.

Browser storage, logs and provider records

Chat preferences, request context, guide state and attribution identifiers may remain in browser storage until the website replaces them or you clear site data. Clearing browser data does not delete the corresponding server-side client record.

Security, delivery and infrastructure logs, and any backup copies maintained by a service provider or business backup process, can have separate retention and recovery requirements. These records follow the applicable provider or backup process. Contact us for information about a specific record.

Request access, deletion or account closure

Email Resume@topresumewriters.us from the address associated with the records. Use a subject such as “Privacy request” and describe whether you want a copy, correction, account closure or deletion of particular information. A ticket/reference number helps us identify the correct request; do not send passwords or sensitive credentials.

We may verify your identity and clarify the scope before acting. We assess requests under applicable law and explain any information that must be retained, why it is needed, and any relevant limitation. We do not require you to create a new portal account solely to raise a privacy request.

Deletion limits and necessary records

Some information may need to be retained for an active engagement, an unresolved complaint, fraud prevention, legal obligations, payment records or the establishment or defense of legal claims. Where appropriate, access and use can be restricted to that remaining purpose.

Backup or archived copies may remain until the applicable backup cycle ends. If information is restored for recovery, the relevant deletion or restriction request must be considered again. External recipients and independently controlled providers may need separate requests under their own policies.

Policy changes

We may update this policy when storage, cleanup processes or service needs change. The date above identifies this version. For questions about a specific document or request, contact Resume@topresumewriters.us.