NexReach AIVersion 12 October 2026 · NexReach AI
Retention & Deletion Principles
NexReach is a product of TwinStance Solutions LLP.
Current position: no blanket customer-data retention schedule has been approved. The following principles describe the inventory and review requirements; they are not invented deletion deadlines. Automated customer-data deletion is not enabled by this notice.
| Category | Retention / deletion review |
|---|---|
| Leads, contacts, refinement uploads and results | Review customer instructions, service purpose, duplicate/rejected-row evidence and lawful deletion scope. No approved fixed period. |
| Campaigns, messages and delivery/reply history | Review service/audit need and suppression obligations. Never reset campaign history as a substitute for deletion assessment. |
| Call data, transcripts and recordings if enabled | Review purpose, recording permissions, provider storage and customer instructions. Provider deletion must be requested/confirmed separately where applicable. |
| Privacy/Terms evidence, complaints and suppression records | Keep proportionate evidence of choices, handling and prohibited-contact restrictions. A delete/re-import must not silently erase opt-out protection. |
| ICT/security logs | Where CERT-In directions apply, rolling 180-day secure log availability and applicable Indian-jurisdiction requirements must be met. Current size-based Docker rotation alone does not demonstrate that coverage; protected archival arrangements are pending. |
| Backups and stopped rollback copies | Inventory access, encryption, restoration and expiration; reconcile deletion on restore. No approved backup expiry/deletion SLA is claimed. |
| Billing/invoice/payment records | Accountant/legal review must determine applicable tax/accounting retention, legal holds and mandatory remedies. No arbitrary period is set. |
For deletion, verify identity/authority, identify the tenant and data scope, assess legal holds and payment/suppression requirements, export where requested, obtain necessary provider instructions, and record what was removed, retained and why. Existing administrative workspace deletion has activity safeguards but is not a complete automated downstream erasure process.
Requests, verification and complaints
Use the Privacy & Requests Centre or email the Grievance Officer for access, correction, export, deletion, consent withdrawal or a complaint. The centre issues a private reference/token and tracks request status. Submission alone does not verify identity, disclose data, stop a subscription or erase records. We verify identity, authority and scope through the existing account/contact channels first. We do not ask for a password or an unneeded identity-document copy. Customer-contact requests may require the customer/controller’s instructions. If a request cannot be fulfilled in full, the response should explain the reason and the applicable complaint route.
Where the Indian E-Commerce Rules apply, consumer complaints must be acknowledged within 48 hours and redressed within one month. Other applicable statutory timelines take precedence. A complaint may also be made to the competent authority; our process does not exclude that right. This is a published handling process, not a claim that every request is automatically fulfilled.
Operator: TwinStance Solutions LLP. Principal address supplied by the operator: Tulasipur, Cuttack, Odisha, India. Grievance Officer: Sk Siraz, Director & Grievance Officer; [email protected]; +91 7008712605. Support: [email protected]; security/privacy reports: [email protected]. Do not include passwords, payment-card details or unnecessary sensitive data.