Data Retention

• No single retention period applies to all data — Retention is determined by data category, processing purpose, customer relationship status, and applicable legal obligations.
• Account Data — May be retained while the account is active and for an appropriate period after termination to support security, support, or legal obligations.
• Order/Payment Data — Retained as required for reconciliation, accounting, fraud prevention, refunds, chargebacks, disputes, and legal obligations.
• Invoice Data — Retained for periods required to comply with accounting, tax, invoicing, and record-retention obligations.
• License/Entitlement Data — May be retained while rights remain valid and for an appropriate period afterward to support Restore, support, fraud prevention, audit, or dispute handling.
• Device Binding Data — May be retained for as long as required to manage Activation, Reinstall, Restore, Device Replacement, Quantity, and licensing history.
• Diagnostic/Telemetry Data — Retained for periods appropriate to error analysis, performance, security, or quality purposes, after which it may be deleted or aggregated.
• Support Data — Support records may be retained as required to resolve Cases, maintain support history, perform quality control, and handle disputes.
• Security Logs — Security or Audit Logs may be retained for periods appropriate to detect, investigate, and resolve security incidents or fraud.
• Cookie Data — Retained according to Cookie type, including Session or Persistent Cookies, with durations disclosed through the applicable Cookie Notice/Settings.
• Legal Hold — Data may be retained beyond normal periods where required for disputes, investigations, competent-authority requests, or evidence-preservation obligations.
• End of Retention Period — When data is no longer required and no legal basis requires continued retention, it may be deleted, anonymized, aggregated, or otherwise handled under the applicable data-governance process.

Retention principle: identify purpose → classify data → determine an appropriate retention period → protect data throughout retention → delete/anonymize when no further basis exists.