Data Retention Policy
Last Updated: 12 July 2026
1. Overview
eNeoteric Consultancy Services Pvt. Ltd. (“RAMOJ”) retains personal data only for as long as necessary for the purposes it was collected, to comply with legal obligations, resolve disputes, and enforce our agreements.
This policy applies to data collected via ramoj.com and the RAMOJ Mobile App. It supplements our Privacy Policy.
2. Retention Schedule
| Data Category | Retention Period | Reason |
|---|---|---|
| Account profile (name, email, phone) | Until account deleted + 30 days | Active use; 30-day grace period for recovery |
| Order history and invoices | 7 years from invoice date | Income tax, GST audit, and accounting obligations under Indian law |
| Payment transaction records | 7 years | GST compliance and financial regulations |
| Authentication tokens (JWT, refresh) | Token lifetime (15 min / 7 days) | Security; revoked on logout or explicit deletion |
| OTP records (MSG91) | 10 minutes (OTP validity) | One-time use; purged after verification or expiry |
| Device login records | 1 year | Security audit trail for new-device OTP challenges |
| Application logs (API, errors) | 90 days | Operations monitoring and incident response |
| Wishlist data | Until removed by user or account deleted | Active feature; user-controlled |
| Support correspondence (email/chat) | 3 years | Dispute resolution and service quality |
3. Account Deletion
When you delete your account (via Account → Profile → Delete Account on web, or by contacting us), we:
- Immediately revoke all active sessions and authentication tokens
- Soft-delete your profile and PII (name, email, phone) within 30 days
- Retain order and financial records for 7 years as required by law
- Remove your data from backups during their normal rotation cycle (up to 90 days)
4. Backups
Database backups are retained for up to 90 days. Data deleted from the live database will be removed from backups once those backups expire during the normal rotation cycle.
5. Legal Holds
We may extend retention beyond the periods above if data is subject to a legal hold, regulatory investigation, or ongoing dispute. We will inform you when a hold is lifted if we are legally permitted to do so.
6. Data Deletion Requests
You may request deletion of your personal data at any time. To submit a deletion request:
- Web: Account → Profile → Delete Account
- Email: info@ramoj.com with subject “Data Deletion Request”
We will respond within 30 days. Data required for legal compliance cannot be deleted before the applicable retention period expires.
7. Contact
For questions about this policy, contact our data privacy team at info@ramoj.com.
RAMOJ — eNeoteric Consultancy Services Pvt. Ltd., India