Data Retention & Deletion Policy

We keep personal data only for as long as it is needed for the purposes it was collected, to provide the Services, to meet legal and tax obligations, and to resolve disputes. When data is no longer needed, we delete, anonymise or restrict it.

• Account & profile data — for as long as your account is active.
• Identity / KYC data & video — for the life of the account plus a limited period afterwards, as required to defend against fraud and to meet legal obligations.
• Asset records, stories & media — for as long as the asset is registered to you, unless you delete them.
• Payment & invoice records — retained for the period required under applicable tax and accounting law.
• Security & access logs — retained for a limited period for safety and audit.

Aucemo anchors certificates and provenance events on a permissioned blockchain. By design, on-chain entries — such as certificate hashes, token records and event timestamps — are immutable and cannot be deleted or altered. Where you exercise deletion rights, we delete or anonymise the associated off-chain data (your profile, media, descriptions) and unlink it from on-chain references, but the on-chain record itself remains.

• You can request account deletion from your settings or by writing to us.
• We delete or anonymise your off-chain personal data, subject to the exceptions below.
• Any remaining wallet balance is forfeited on deletion, as set out in the Wallet & Payments Terms.
• On-chain records remain immutable as described in section 3.

We may retain certain data beyond normal periods where required to comply with law, respond to lawful requests from authorities, exercise or defend legal claims, or prevent fraud and abuse.

Deleted data may persist in encrypted backups for a limited period before those backups are cycled out, after which it is no longer recoverable.

To exercise your rights or ask about retention, contact support@aucemo.com. Unresolved concerns can be escalated to our Grievance Officer at support@aucemo.com.