Data Retention Policy
Last updated: June 2026
1. Overview
PaceLeaf ("we," "us," "our") retains personal data only for as long as necessary to fulfill the purpose it was collected for, to comply with legal obligations, and to resolve disputes. This policy describes retention periods for each category of data we collect.
PaceLeaf is currently in early development. At this stage, we collect only waitlist signups, partner inquiries, and contact form submissions. Retention periods for future app data are included for transparency.
2. Retention Schedule
| Data Category | Retention Period | Basis |
|---|---|---|
| Waitlist signups | 24 months from signup, or until you request deletion | Legitimate interest / Consent |
| Partner inquiry leads | 36 months from submission, or until you request deletion | Legitimate interest (business relationship) |
| Contact form messages | 24 months from submission | Legitimate interest (support record) |
| Marketing emails (opted in) | Until you unsubscribe + 30 days | Consent |
| Server/access logs | 90 days | Security / Fraud prevention |
| Activity data (future app) | Duration of account + 90 days after deletion | Contract performance |
| Points transaction history (future app) | 5 years (financial record requirement) | Legal obligation |
| Aggregated / anonymized analytics | Indefinite (cannot be re-identified) | Legitimate interest (platform improvement) |
3. How We Delete Data
At the end of the applicable retention period, we delete or anonymize your personal data using the following methods:
- Database records: Permanently deleted from our Cloudflare D1 database and all backups within 30 days of the retention period ending.
- Email lists: Removed from our email service provider and suppression lists updated to prevent re-addition.
- Backup systems: Deleted from all backup copies within the next scheduled backup cycle (maximum 30 days).
- Anonymization: Where deletion is not possible (e.g., aggregate analytics), data is irreversibly anonymized so it can no longer be linked to you.
4. Early Deletion Requests
You may request deletion of your personal data at any time before the end of the applicable retention period. We will process deletion requests within 30 days.
To request deletion:
Email: [email protected]
Subject line: Data Deletion Request
Include the email address associated with your signup so we can locate your record.
We may retain a minimal record of your deletion request itself for up to 12 months to demonstrate compliance.
5. Legal Holds
In some cases, we may be required by law to retain data beyond the periods described above. This includes situations where:
- Data is subject to a legal hold, litigation, or regulatory inquiry
- A law or regulation mandates a specific retention period
- The data is necessary to enforce our Terms of Use
We will notify you if a legal hold prevents us from fulfilling a deletion request, where permitted by law.
6. Third-Party Data Processors
Our data processors (cloud infrastructure, email service providers) are contractually required to delete your data within 30 days of our deletion instruction, subject to their own legal obligations.
Current data processors include Cloudflare (infrastructure and database hosting). We maintain data processing agreements with all processors.
7. Policy Updates
We may update this Data Retention Policy as our Services evolve. We will post the updated policy on this page with a revised date and notify waitlist subscribers of material changes.