Data retention policy
How long Organiz keeps different kinds of data, and how deletion works.
Effective date: September 26, 2026 Last updated: September 26, 2026
This policy states how long Organiz retains different categories of data, and what happens when an account, organization, or integration is removed. It's written to match what the platform actually does today, not an aspirational target.
Purpose and scope
We keep data only as long as it serves the purpose it was collected for: running your account, running an organization's campaigns, and meeting our own legal and operational obligations. This policy applies to all personal and organizational data handled by Organiz, across our member platform and admin panel.
Retention by data category
| Data category | Retention | Notes |
|---|---|---|
| Account and profile data (name, email, login identity) | Life of the account | Deleted on request, see below |
| Contact-form submissions (phone, zip, SMS consent) | Life of the account | Tied to the member and CTA it was submitted through |
| Contact-form submissions from people without an account | Until deletion is requested | Request deletion at privacy@organiz.org |
| Activity and points data (actions completed, points, streaks, kudos) | Life of the account | This is the record your points/level are computed from |
| Reward redemptions | Life of the account, or as required for an organization's own fulfillment records | |
| Connected integration credentials (e.g. an Action Network API key) | Until the organization disconnects the integration | Deleted immediately on disconnect, not just deactivated |
| Integration sync logs (success/failure records) | 90 days | Used for troubleshooting sync issues |
| Product analytics events | Per our analytics provider's retention settings | Aggregate/device-linked, not tied to name or email |
| Support communications | 2 years | Enforced manually today, not automated |
Account and organization deletion
When a member requests account deletion, we remove their personal data (name, email, contact-form data) and disassociate their activity records from their identity. When an organization's relationship with Organiz ends, we work with that organization on a deletion or export timeline for the data they're responsible for.
Today, deletion is a manual, support-request-driven process. There's no self-service "delete my account" button yet. To request deletion, contact privacy@organiz.org.
Data disposal
When data is deleted, it's removed from our production database right away. We keep daily backups of that database for 7 days. Deleted data may remain in those backups until they're overwritten, which happens automatically within 7 days. Backups are never used to restore data a person has asked us to delete.
Exceptions
We may retain data longer than the table above where required by law, to resolve a dispute, to enforce our agreements, or to prevent fraud or abuse.
Review
We review this policy at least annually, or whenever we materially change what data we collect or how long we keep it.
Contact
Questions about this policy, or to request deletion of your data: privacy@organiz.org.
See also our Privacy Policy.