Data Retention Policy
Last updated: 13 July 2026 (Company)
We hold onto data only for as long as we genuinely need it — for the service, for safety, or because the law requires it.
Retention schedule
| Data type | Retention period |
|---|---|
| Active account data | While membership active + 2 years after lapse |
| Messages | 2 years from last message |
| Exchange records | 2 years from completion |
| Job photos (not flagged) | 14 days from exchange completion |
| Job photos (safety flagged) | Duration of safety case + 1 year |
| Safety reports | 5 years |
| Evidence PDFs | 5 years |
| Payment records | 7 years (legal/tax obligation) |
| Audit logs (admin access) | 5 years |
| Deleted account data | Anonymised after 90 days |
| Abuse-prevention markers (one-way hashes of phone & address) | 24 months from account deletion |
| Offline pack data | Regenerated monthly — previous pack deleted |
Deletion requests
You can request deletion of your account and data at any time from Settings → Account → Delete My Account.
On a deletion request:
- Account immediately deactivated.
- Public profile removed within 24 hours.
- Personal data anonymised within 90 days.
- Some data retained longer where legally required (payment records 7 years, safety reports 5 years, active legal matters until resolved).
- You receive a confirmation email when deletion is complete.
Abuse-prevention markers
To stop banned or removed members simply re-registering under a new name, we keep a one-way hash (an irreversible scramble) of the mobile number and address linked to a deleted account. We do not keep a readable copy of your number or address after deletion — only this hash, which can't be turned back into your details.
- Lawful basis: legitimate interest in preventing fraud and abuse and keeping the community safe.
- If you left voluntarily and later return, the hash simply lets a moderator check it's really a fresh start.
- If you were removed for serious breaches, the hash blocks re-registration with the same number or address.
- These markers are automatically deleted 24 months after the account was removed.
Inactive accounts
Accounts inactive for 3 years receive an email asking if they wish to remain. If there is no response within 30 days, the account is anonymised.