Data Retention & Deletion Policy

Hubroot retains personal information only for as long as reasonably necessary for the purposes for which it is processed, operation of Skkrum, security and fraud prevention, contractual obligations, and applicable legal requirements.

Active Accounts

Account information, messages, project conversations, tasks, files, and related collaboration content may remain available while the relevant account or workspace remains active, unless a user or authorized workspace function deletes the content or a configured retention rule applies.

Account Deletion

After a verified account-deletion request, Hubroot targets deletion or de-identification of personal information associated with the account from active production systems within 30 days, subject to information that must or may be retained for legal, financial, tax, fraud-prevention, security, dispute-resolution, or legitimate records-management purposes.

Backups

Deleted information may remain temporarily in protected backups until those backups are overwritten or expire through the ordinary backup lifecycle. Backup copies are not intended to be restored for ordinary product use after a valid deletion request, except where restoration is required for disaster recovery, security, or legal reasons.

Financial and Security Records

Transaction, invoice, fraud-prevention, security, and audit records may be retained for longer periods where reasonably necessary or required by law. Where feasible, retained records are minimized or separated from active collaboration data.

Workspace Content

Deletion of an individual account does not necessarily require deletion of every business record in which that person participated if another lawful basis or customer requirement permits the record to remain. Where possible, account identifiers may be removed, de-identified, or replaced while preserving legitimate workspace records.