CounterEcho Data Retention & Deletion Policy

1. What we keep

• Customer feedback: rating, comment, and any contact details the customer chose to provide, plus consent flags.
• Business account data: your business profile, staff accounts, review-platform links, and settings.
• Billing and subscription history, referral records, and security/audit logs.

2. How long we keep it

• Feedback is kept while the business account is active so the business can use its history; when an account is deleted we remove the business's data within 30 days of the deletion request.
• QR session tokens are single-use and are cleared shortly after they expire or are used.
• Billing and subscription records are kept for 7 years as required by tax law.
• Security/audit logs are kept on a limited rolling basis for abuse protection.

3. Deletion requests

• As a customer: contact the business whose QR you scanned first — it owns the feedback. If the business cannot or will not act, email privacy@beyondx.llc with the business name and the approximate date; we verify and delete or de-identify the matching submissions within 30 days.
• As a business: request deletion by emailing privacy@beyondx.llc from your account email. We delete your tenant and its data within 30 days, except billing records retained per tax law.

4. Backups

Service backups may briefly retain data after deletion for disaster-recovery purposes; restored data is subject to the same deletion request.

---

*In plain language: we keep feedback while your account is active and remove it when you ask, within 30 days — billing records stay for tax purposes. Customers can ask us to delete their feedback anytime.*