Data Storage & Retention Policy

Last updated: October 25, 2025

1. Scope & Ownership

Konquered Technologies LLC governs all data hosting, infrastructure, and cloud services for the Konquered platform suite (Live, OnDemand, Vaults, PM Console, APIs). Konquered Ventures LLC may access anonymized operational data only for performance analysis and compliance.

2. Storage Architecture

• Primary hosting: Google Cloud Platform (GCP) US multi-region with AES-256 encryption at rest and TLS 1.2+ in transit.
• Backups: Encrypted snapshots retained 30 days on GCP Coldline Storage; zero customer data stored locally.
• Access control: Role-based IAM, SSO (Google/Microsoft/Firebase), and multi-factor authentication for administrators.

3. Retention Schedule

• Operational logs: 12 – 24 months (aggregated after 90 days).
• Project files & uploads: Until contract end + 90 days, then purged or returned to client.
• Analytics / telemetry: De-identified within 90 days of collection.
• Account metadata: Retained while active and up to 24 months post-termination for audit & dispute resolution.

4. Client Responsibilities

Clients must not upload Protected Health Information (PHI) or regulated data except where a Business Associate Agreement (BAA) is in place and approved vaults are used.

5. Deletion & Portability

Upon written request, Konquered will export and delete client data within 30 days (subject to legal or audit retention). All deletions are cryptographically verified and logged.

6. Contact

For questions or deletion requests: privacy@ikonquer.com