Data Deletion Policy

Introduction

WeSalute's Data Deletion Policy describes how customer data is deleted in connection with the cancellation or of a WeSalute account. This policy applies to all data collected by WeSalute except:

• data that resides in any WeSalute product or service not covered by this policy

• data that resides in third-party services managed and hosted by third parties, with the exception of the company's infrastructure provider

• data that resides in WeSalute products or services that are in beta, testing, or an early access program It is WeSalute's policy to store data indefinitely. Data is stored indefinitely until customer requests deletion, as we oer services for free.

WeSalute may provide the option for customers to delete data after their subscription and/or contractual agreements ends. This request must be made by the customer, and WeSalute may require additional identity verification, including but not limited to ID verification. WeSalute should hard delete all information from currently-running production systems within one quarter of the deletion request. Only the following Operations Team's Managers can delete customer data in the event that WeSalute is required to do so:

• Engineering Operations

• Customer Operations

• WeSalute Business

Policy Review, Disciplinary, & Responsibility

Disciplinary Action

Team Members who violate this policy may face disciplinary consequences in proportion to their violation. ExecutiveOps will determine how serious a Team Member's offense is and take the appropriate action.

Responsibility

It is the responsibility of the CTO to manage the list of team members that may handle customer requests for data deletion. The CTO is responsible for ensuring this policy is followed.

warning

This Policy currently does not have the required policy footer content standard on WeSalute Policies. This may be intentional by the nature of the content.