Data Deletion

DuruVault ("DuruVault", "DURU", "we", "us", or "our") respects your right to control and, where applicable, delete personal information and documents associated with your account.

This Data Deletion Policy explains how you may request deletion of information from DuruVault and how DuruVault handles deletion, retention, backups, and legally required records.

1. Your Right to Request Deletion

Depending on your location and applicable law, you may request deletion of personal information and documents associated with your DuruVault account.

You may be able to delete information directly through your account where the deletion functionality is available.

You may also submit a deletion request by contacting: PRIVACY@DURUVAULT.COM.

2. What You May Delete

Subject to applicable law and technical limitations, users may request deletion of:

• Uploaded documents and files;
• Personal profile information;
• Account information;
• Verification information;
• Shared documents and associated sharing permissions;
• Saved preferences;
• Other personal information associated with the account.

Certain information may be retained where required or permitted by applicable law.

3. Account Deletion

If you request complete account deletion, DuruVault may deactivate your account and begin the process of deleting information associated with the account.

Before requesting deletion, users should download or export documents and information they wish to retain, where export functionality is available.

Once deletion is completed, deleted information may not be recoverable.

4. Document Deletion

When a user deletes a document, DuruVault will take reasonable steps to remove the document from active systems within the applicable operational timeframe. Deletion from active systems may not immediately remove information from:

• Encrypted backups;
• Disaster-recovery systems;
• Security logs;
• Fraud-prevention records;
• Legal or compliance records;
• Other systems where immediate deletion is technically impractical or legally restricted.

5. Backups

DuruVault may maintain encrypted or otherwise protected backups for security, disaster recovery, business continuity, and operational purposes.

Information contained in backups may remain temporarily after deletion from active systems.

DuruVault will apply appropriate retention and security controls to such backup information and will delete or overwrite it according to the applicable backup lifecycle, unless continued retention is required or permitted by law.

6. Legally Required Retention

DuruVault may retain certain information after a deletion request when necessary to:

• Comply with legal obligations;
• Meet regulatory requirements;
• Establish, exercise, or defend legal claims;
• Prevent fraud or abuse;
• Investigate security incidents;
• Maintain necessary security records;
• Resolve disputes;
• Enforce agreements;
• Comply with financial, tax, accounting, or other lawful recordkeeping requirements.

Where information is retained for these purposes, DuruVault will seek to limit its use to the purpose requiring retention.

7. DuruVerify Information

Deletion of DuruVerify information may be subject to additional requirements. Where a verification record is necessary to maintain the integrity, security, or auditability of a verification system, certain limited verification information may be retained for an appropriate period. This may include:

• Verification identifier;
• Verification status;
• Verification date or timestamp;
• Verification type;
• Revocation or expiration information;
• Security or audit information.

DuruVault will seek to minimize the amount of personal information retained in verification records.

8. Shared Documents

Deleting a document from your DuruVault account does not necessarily mean that a person or organization to whom you previously provided access has deleted copies of that information.

Where available, DuruVault may allow users to revoke active sharing permissions or access links.

Users remain responsible for considering who receives information before sharing sensitive documents.

9. Data Deletion Request Verification

To protect users against unauthorized deletion requests, DuruVault may require reasonable verification of the requester's identity or account ownership.

We may request additional information when reasonably necessary to confirm that a deletion request is legitimate.

10. Processing Time

DuruVault will process valid deletion requests within the timeframe required by applicable law. The time required may depend on:

• The type of information;
• The systems involved;
• The complexity of the request;
• Legal retention requirements;
• Backup systems;
• Security requirements; and
• Whether additional verification is required.

11. Third-Party Service Providers

DuruVault may rely on third-party providers for services such as:

• Cloud storage;
• Infrastructure;
• Authentication;
• Payments;
• Identity verification;
• Document processing;
• Analytics;
• Communications;
• AI services; and
• Security services.

Where applicable, DuruVault will take reasonable steps to communicate valid deletion requirements to relevant service providers in accordance with contractual obligations and applicable law.

Third-party providers may retain limited information where legally required or reasonably necessary for their legitimate security, legal, or operational purposes.

12. International Data Deletion

Because DuruVault may serve users internationally, personal information may be processed or stored in different countries.

Deletion requests will be handled according to applicable privacy and data-protection requirements in the relevant jurisdiction.

Where applicable, users may have additional deletion or erasure rights under local law.

13. Fraud, Security, and Abuse Prevention

DuruVault may retain limited information necessary to detect, investigate, prevent, or respond to:

• Fraud;
• Identity theft;
• Account takeover;
• Unauthorized access;
• Abuse of verification systems;
• Cybersecurity incidents;
• Other unlawful or harmful activity.

Such information will be retained only for as long as reasonably necessary for the applicable purpose or as required by law.

14. Effect of Deletion

Deletion may result in permanent loss of access to:

• Your account;
• Stored documents;
• Verification history;
• Sharing configurations;
• Account preferences;
• Other information associated with your account.

DuruVault may not be able to restore information after deletion has been completed.

15. Deletion Does Not Remove Legal Obligations

Deleting your account or information does not eliminate obligations that arose before deletion, including payment obligations, contractual obligations, legal claims, or other responsibilities that survive termination under applicable agreements.

16. Anonymization

Where complete deletion is not technically or legally required, DuruVault may anonymize information so that it can no longer reasonably be associated with an identifiable individual.

Properly anonymized information may be retained and used for legitimate purposes, subject to applicable law.

17. Children's Information

If DuruVault becomes aware that personal information belonging to a child has been collected in circumstances where such collection is not permitted, we will take appropriate steps to investigate and, where legally required, delete the information.

Parents or legal guardians may contact us regarding such requests.

18. How to Submit a Data Deletion Request

To request deletion, contact:

• DuruVault / DURU LLC
• DURU NEW YORK
• 711 Seagirt Avenue
• PRIVACY@DURUVAULT.COM
• Subject line: DATA DELETION REQUEST

Please provide enough information for us to identify your account and understand the scope of your request.

Do not send passwords, authentication codes, or unnecessary sensitive information by email.

19. Appeals and Questions

If we cannot fulfill all or part of a deletion request, we will explain the reason where required by applicable law.

Depending on your jurisdiction, you may have the right to appeal a privacy decision or submit a complaint to the appropriate data-protection authority.

20. Security During Deletion

DuruVault will use reasonable technical and organizational safeguards when processing deletion requests to help prevent unauthorized deletion, disclosure, or alteration of information.

Deletion processes may be logged for security, compliance, and audit purposes.

21. Relationship to Other Policies

This Data Deletion Policy should be read together with:

• DuruVault Privacy Policy;
• DuruVault Terms of Use;
• DuruVault Cookie Policy;
• DuruVault Security Policy;
• DuruVerify terms and disclosures; and
• Other applicable DuruVault policies.

If another policy provides a specific retention requirement, the applicable requirement will apply.

22. Changes to This Policy

DuruVault may update this Data Deletion Policy periodically to reflect changes in our Services, technology, legal requirements, or data-management practices.

The "Last Updated" date identifies the current version.

23. Contact Us

For data deletion, privacy, or personal-information requests:

• DuruVault / DURU LLC
• DURU NEW YORK
• 711 Seagirt Avenue
• PRIVACY@DURUVAULT.COM