Data Retention Policy

1. Introduction

Aevum News is committed to responsible data stewardship. This Data Retention Policy outlines how long we retain personal and operational data, the criteria used to determine retention periods, and the procedures for secure data disposal. Our approach aligns with GDPR, CCPA, and other applicable data protection regulations worldwide.

We believe in collecting only what is necessary, retaining it only as long as required, and deleting it securely when it no longer serves a legitimate purpose.

2. Core Retention Principles

• Data Minimization: We collect and retain only data strictly necessary for service delivery, legal compliance, or explicit user consent.
• Purpose Limitation: Data is retained only for the specific purposes for which it was collected, unless a new legal basis is established.
• Automatic Expiration: Systems are configured to automatically flag and anonymize or delete data once its retention period expires.
• Secure Disposal: All deleted data undergoes cryptographic erasure or physical destruction, verified by our Data Protection Officer (DPO).
• Transparency: Users can access, export, or request deletion of their data at any time through our privacy dashboard.

3. Data Retention Periods

Retention periods are determined by legal requirements, operational necessity, and user consent. The following table outlines our standard retention schedule:

4. User Rights & Deletion Requests

Under applicable data protection laws, you retain the right to:

• Request access to your personal data
• Rectify inaccurate information
• Export your data in a machine-readable format
• Request erasure ("Right to be Forgotten")
• Object to automated decision-making

Deletion requests are processed within 30 days. Upon approval, your data is permanently removed from all active systems, backups, and third-party processors. You may initiate a request via your Account Settings or by contacting our DPO directly.

5. Legal & Operational Exceptions

While we honor retention limits, certain circumstances may require extended data preservation:

• Legal Disputes: Data may be preserved if litigation is reasonably anticipated or ongoing.
• Regulatory Investigations: Authorities may issue preservation orders requiring data retention beyond standard periods.
• Security Incidents: Data related to active cybersecurity threats may be retained to prevent further harm.
• Archival Journalism: Public interest news content may be preserved indefinitely in accordance with historical record standards, though personally identifiable information is redacted.

In all exception cases, data is isolated in restricted-access storage, access is logged, and retention is reviewed quarterly by our compliance team.

6. Data Deletion Process

When retention periods expire, Aevum News executes a structured deletion protocol:

1. Identification: Automated systems flag records reaching expiration dates.
2. Verification: Compliance team reviews for pending legal holds or active user requests.
3. Anonymization: Where complete deletion isn't immediately feasible, data is irreversibly anonymized within 14 days.
4. Erasure: Active databases are purged. Backup systems follow a staggered deletion schedule (max 30 days).
5. Audit: Deletion certificates are generated and stored for regulatory reporting.

We do not sell, share, or repurpose expired data. Third-party processors are contractually bound to mirror our deletion timelines.

7. Contact & Supervisory Authority

If you have questions about this policy, wish to exercise your data rights, or need to report a concern, please contact our Data Protection Office: