Data Retention Policy

At Doctor Droid, we prioritize the security, privacy, and control of our users’ data. This Data Retention Policy outlines our commitment to ensuring that customers have full flexibility over their data retention while maintaining compliance with industry best practices.

1. Data Retention Period & Customer Control

Doctor Droid enables customers to retain data for a period of their choosing, up to 90 days from the time of data generation. Customers have the flexibility to configure their data retention settings within our platform to align with their internal policies and regulatory requirements.

2. No Ownership or Long-Term Storage

Doctor Droid does not claim ownership of any customer data processed within our system. We act purely as a data processor, ensuring that all stored data remains under the full control of our customers. Furthermore, we do not store customer data in long-term cold storage beyond the configured retention period.

3. Automatic Data Deletion

Once the chosen retention period (up to 90 days) expires, data is permanently and irreversibly deleted from all Doctor Droid systems, including backups and logs. There is no archival or cold storage of customer data beyond this timeframe.

4. Customer-Driven Deletion

Customers may manually delete their data at any time before the expiration of their configured retention period. Once deleted, data is immediately removed from our active systems and permanently purged from backups within a reasonable timeframe.

5. Data Security During Retention

While data is retained within the specified period, Doctor Droid implements industry-leading security measures, including encryption in transit and at rest, to safeguard customer data from unauthorized access.

6. Compliance & Transparency

Our data retention practices are designed to meet compliance requirements for various security and privacy frameworks. Compliance with industry standards like GDPR, SOC 2, HIPAA (where applicable), and other industry standards is in our near future pipeline. We provide customers with full transparency regarding data handling practices to support their regulatory obligations.

7. No Data Monetization

Doctor Droid does not use, sell, or share customer data for any purpose other than providing our core observability and investigation services.

8. Policy Updates

This policy may be updated periodically to reflect improvements in our data handling practices. Customers will be notified of any material changes in advance.

For further inquiries regarding this policy, please contact us at [email protected].