Introduction
This Data Retention Policy (“Policy”) explains how Spanrr Tecnologies Private Limited (“Superdash”, “Company”, “we”, “our”, or “us”) retains, stores, and deletes data collected through our AI voice orchestration platform and related services (the “Service”), available at https://superdashhq.com, https://superdash.ai, and https://www.superdashhq.com. This Policy supplements, and should be read together with, our Terms of Service and Privacy Policy. Capitalized terms not defined here have the meanings given in those documents. Where this Policy and the Privacy Policy address the same subject, they are intended to be consistent; if there is any conflict, the more specific provision applies.1. Purpose and Scope
We retain data only for as long as it is needed for the purposes for which it was collected, to deliver and improve the Service, to meet legal, tax, and regulatory obligations, to resolve disputes, and to enforce our agreements. This Policy applies to all data we control or process in connection with the Service, including account information, usage data, communication metadata, consent records, and billing records. It applies to data held in our production systems, backups, and archives.2. Guiding Principles
Our retention practices follow these principles:- Purpose limitation — We keep data only for defined, legitimate purposes.
- Storage minimization — We do not retain data longer than necessary for those purposes or for any applicable legal requirement.
- Customer ownership — Your data remains your own. You input and control your User Materials, and you may request access or deletion as described below.
- Security throughout the lifecycle — Retained data is protected using commercially reasonable safeguards until it is securely deleted or anonymized.
3. Voice Recordings and Transcripts
Consistent with our Privacy Policy:- We do not store or replicate voice call recordings on our servers. All call recordings are handled and stored solely by the telephony provider, in accordance with that provider’s own retention and privacy practices. You are responsible for understanding and, where applicable, configuring retention with your telephony provider.
- Neither voice recordings nor transcripts are used for training, fine-tuning, or optimizing our AI or machine-learning models unless explicitly authorized by the customer.
- We process only the metadata required for analytics and performance tracking (for example, call duration, timestamps, status, and aggregate quality metrics).
4. Retention Periods by Data Category
The periods below describe how long we retain each category of data.| Data category | What it includes | Retention period |
|---|---|---|
| Account / Personal Data | Name, email address, account profile and configuration | For the life of your account, then deleted or anonymized within 90 daysof account closure, unless a longer period is required for legal, tax, or dispute-resolution purposes |
| User Materials | Content, data, and configurations you input into the platform | For the life of your account; deleted or returned on closure within 90 days, subject to legal holds |
| Communication metadata | Call duration, timestamps, status, performance and analytics metadata | 3 months after which it is deleted or aggregated into non-identifiable form |
| Voice recordings | Audio recordings of calls | Not retained by Superdash — held solely by the telephony provider per its policy |
| Transcripts | Text transcripts of calls | Not used for model training unless authorized; retained only as needed to deliver requested features, then deleted |
| Voice biometric data | Voice characteristics used for synthesis or verification, where opted in | Only while needed for the authorized purpose; deleted or anonymized on withdrawal of consent or end of purpose |
| Do-Not-Call / registry validation logs | Records of registry checks and suppression-list updates | Retained for the period needed to demonstrate compliance; registry refresh cycles do not exceed 31 days |
| Billing and payment records | Invoices, transaction records, tax records (card details are held by our payment processor, not by us) | For the period required by applicable tax and accounting law in India and other relevant jurisdictions — typically up to 3 years |
| Usage Data | IP address, device and browser data, diagnostic logs | Generally a shorter period than Personal Data; retained for analytics, security, and functionality, then deleted or aggregated 12 months |
| Support communications | Emails, chat logs, and tickets | 12 months after resolution |
| Cookies and tracking data | Session, preference, security, and advertising cookies | Per the lifespan set for each cookie; session cookies expire at the end of the session |
| Marketing data | Subscription status, communication preferences | Until you unsubscribe or object, then suppression data is kept only to honor your opt-out |
| Backups | System backups containing the above | Overwritten on a rolling cycle of 90 days; data deleted from production is purged from backups within this cycle |
5. Criteria for Determining Retention
Where a specific period is not fixed above, we determine how long to keep data based on:- the amount, nature, and sensitivity of the data;
- the purpose for which we process it and whether that purpose can be achieved by other means;
- applicable legal, regulatory, tax, accounting, and contractual obligations (including telecommunications and consumer-protection regimes such as TCPA, GDPR, TRAI/TCCCPR, and others referenced in our Terms);
- the potential risk of harm from unauthorized use or disclosure; and
- whether the data is subject to an active dispute or legal hold.