Data Retention Schedule
BeeCNC applies the shortest period reasonably necessary for service delivery, client instructions, security, disputes, accounting, and legal obligations.
| Record | Normal retention approach |
|---|---|
| Client lead and customer records | For the active customer relationship and thereafter only as instructed by the client or required for transition, backup rotation, disputes or law. Clients remain responsible for selecting an appropriate active-record period. |
| Client-uploaded reference and stencil images | For the active inquiry and client relationship, then deleted or returned according to the client’s instructions, subject to backup rotation, disputes, consent records, and legal requirements. Clients should remove images when no longer needed. |
| BestEstate procurement inquiries | For the sourcing or contracting opportunity and thereafter only as reasonably needed for follow-up, contract records, legal claims, security, or applicable procurement-record obligations. |
| BeeCNC account and business profile | For the account term and a limited wind-down period, subject to billing, dispute, fraud-prevention and legal requirements. |
| Subscription and accounting records | For the period reasonably required by tax, accounting, chargeback and contract laws; primary payment records are retained by Stripe under its policies. |
| Privacy requests and decision records | Normally up to three years after closure to demonstrate response and manage appeals; unnecessary identifiers may be minimized earlier. |
| Unverified privacy requests | Normally deleted or minimized after 30 days unless needed for abuse prevention. |
| Rate-limit and abuse-control records | Short fixed windows, with expired counters routinely removed. |
| Security and audit records | For a risk-based period appropriate to investigation, tenant safety, legal claims and accountability. |
| Transactional email records | Delivery metadata only as needed for troubleshooting, suppression, security and provider reconciliation; message retention depends on the mail provider and recipient systems. |
| Demo data | Fictional data remains on the user’s device until reset or browser storage is cleared. |
| Backups | Removed through the ordinary encrypted backup lifecycle; restored data remains subject to the original deletion restriction. |
Deletion exceptions
BeeCNC may preserve limited information when reasonably necessary to comply with law, complete transactions, protect security, maintain suppression lists, exercise or defend legal claims, investigate abuse, or honor a litigation hold. Data that cannot immediately be removed from a backup is isolated from ordinary use and expires through normal rotation.
Client instructions
A client must not instruct BeeCNC to retain information unlawfully. On termination, BeeCNC will delete or return client personal data as described in the DPA, except for legally required or securely isolated copies.
Legal review
These terms describe BeeCNC’s current product and operational practices. They are prepared for counsel review and are not a substitute for advice about a specific business, jurisdiction, or processing activity.