Data Retention Policy
Last updated: 2026-10-27
This policy of Fpa Solutions LTD, a company registered in the Republic of Bulgaria under UIC (ЕИК) 207794750 says what Rigyx stores, for how long, and the legal basis for each period. Every period below is the one the product’s code uses — where two parts of the product keep the same kind of thing for different times, each is written with its case.
Where a deletion request conflicts with a legal obligation to keep data, we tell you which data we must keep and for how long.
| What | Kept | Legal basis | How it works |
|---|---|---|---|
| Your business data — leads and contacts, campaigns and sends, mail read from your connected mailbox, call records and transcripts, documents, uploaded financial documents, knowledge base, agent decisions | While the business exists | Contract | You can remove single items in the product. Deleting the business (Dashboard → Compliance) removes all of it — see the next row. |
| Deleting a business | Carried out 30 days after you confirm | Contract / GDPR Art. 17 | You confirm the request from an e-mail. For 30 days you can cancel it; then the business, everything stored for it and its files are deleted. Records of AI usage are kept without any link to the business. |
| Deleting your personal account | Carried out 30 days after you confirm | GDPR Art. 17 | Settings → Privacy. After 30 days your name, e-mail and phone are replaced, your sessions end and your export links stop working. A business you own is not deleted by this — delete it separately (row above). |
| Export archives (ZIP) | 24 hours, 7 days or 30 days — by where you asked | GDPR Art. 15 / 20 | Dashboard → Compliance: 24 hours. Settings → Privacy (your own data): 7 days. Dashboard → Data (the full bundle): 30 days. Then the file is deleted; a record that the export was made stays. |
| Audit log (sign-ins, member changes, exports, deletions) | 30 days to 7 years — by the business's AI tier | Legitimate interest (security) | Budget tier: 30 days. Balanced and Premium: 1 year. Advanced: 7 years. No tier set: 90 days. The owner can set a period between 1 day and 7 years. Entries tied to no business (such as a failed sign-in) are not deleted automatically. |
| Live activity feed (what the agents did, step by step) | 30 days | Contract | Deleted automatically every day once older than that. |
| Free prospect runs from the public site | 30 days if nobody signs up with them | Legitimate interest | The names, addresses and drafts of a free run nobody claimed are deleted after 30 days; the run's step-by-step log 30 days after the run ends. |
| Free tools on the site (audit, ad-waste scan, competitor teardown) — the e-mail address you give and the result | Until you ask us to delete them | Legitimate interest | Nothing deletes them automatically yet. Write to [email protected] and we delete them. |
| Payments | At Stripe, as tax and accounting law requires | Legal obligation | Stripe handles card payments and keeps the payment records and invoices. Rigyx stores only the subscription status and Stripe’s customer reference — deleted with the business — never a card number. |
Your rights
- Access (Art. 15): request a copy of all data we hold about you.
- Rectification (Art. 16): correct inaccurate data.
- Erasure (Art. 17): delete your account (Settings → Privacy) or a business (Dashboard → Compliance), as described above.
- Portability (Art. 20): export your data as a ZIP from the dashboard.
- Restriction (Art. 18): request restriction of processing in certain circumstances.
- Objection (Art. 21): object to processing based on legitimate interest.
To exercise your rights, use the dashboard or write to [email protected]. We answer within one month.