Data Retention

inEspect is a product of Easy Audit, an Egyptian company whose activity is digital solutions. References to “we”, “us”, or “the operator” mean Easy Audit, which provides and operates this platform.

This page expands the retention section of our Privacy Policy. Periods below are operational commitments for the live system.

1. Active subscriptions

While a company account is active we keep the operational data and staff accounts the workspace needs. Your organization can delete records in-product according to the permissions it sets.

2. After closure or deletion

After company closure or an approved deletion request, we follow the human review workflow on Data Deletion. We aim to remove live customer data once review completes, subject to legal and billing holds.

Where a staged wind-down is agreed (for example a cool-off before permanent delete), we will confirm dates in writing. Audit-log cleanup is manager-triggered from the company Audit log (not an automatic silent purge).

3. Security and audit logs

Audit events stay until a company manager clears older rows to free plan storage, or until a legal hold requires keeping them. People cannot edit or delete individual rows; scheduled silent purge is not used.

4. Auth codes and mail

• Setup / reset codes — expire in about 20 minutes; related records are short-lived.
• Operational email metadata we keep for delivery troubleshooting is short-lived (on the order of weeks to a few months), not a permanent marketing list.

5. Billing

Billing and tax records are kept as long as accounting law requires — longer than the periods above, and not ours to shorten on request alone.

6. Backups

Provider-side database durability (Neon) and object storage may retain copies for a short rotation window after live deletion. We do not edit provider backups to excise individual records; a backup that has been surgically edited cannot be trusted to restore. Honest erasure is two dates: leave the live system, then rotate out of backup.