Data Retention & Deletion Policy
Defines how long each data category is kept, what is deleted, what is anonymised and what must be retained for accounting, safety or legal reasons.
- Dependency class
- C · Jurisdiction-dependent
- Needs Syrian/local legal review or country-specific adaptation.
- Consent
- Not a consent document
- Not revocable while the account is active
Version 0.1-draft · v1 Working Draft — frozen
Draft clauses
Data Retention & Deletion Policy
- 01
Account and profile data: retained while the account is active, then deleted after the defined closure period.
- 02
Identity and biometric references: deleted on account closure or at the end of the verification retention period.
- 03
Ride, wallet and ledger records: retained for the statutory accounting and dispute period, then archived or anonymised.
- 04
Parking and incident photographs: retained for a short review window unless attached to an open dispute, claim or investigation.
- 05
Telemetry and analytics: aggregated or anonymised after the operational window; audit logs kept for their own integrity period.
Open questions for legal review
- Statutory retention periods for financial and identity records under Syrian law.
These documents are professional working drafts prepared for the SYIBE operating model. They are not legal advice and are not approved production legal language. Before public launch, every jurisdiction-sensitive document must be reviewed by qualified local legal counsel once the corporate entity, regulatory classification, municipal permissions, insurance structure, payment provider, KYC provider and hardware structure are finalised.