Data Deletion Policy

1. Purpose

Contracts Connected is committed to protecting customer data and respecting applicable data privacy rights. This policy describes how customers can request deletion of their data and how such requests are handled.

2. Who Can Request Data Deletion

Data deletion requests may be submitted by:

• An authorized representative of a customer organization, or
• An individual user acting on behalf of their organization, subject to verification.

Requests must come from an email address associated with the customer account or otherwise verifiable as authorized.

3. How to Submit a Data Deletion Request

Customers may request deletion of their data by contacting us at:

support@contractsconnected.com

Requests should include:

• Company name
• User name and email address
• A brief description of the data to be deleted
• Confirmation that the requester is authorized to make the request

4. Verification Process

Before processing a deletion request, Contracts Connected verifies the identity and authorization of the requester. If additional information is required to complete verification, the customer will be contacted.

Unverified or incomplete requests may be delayed until verification is completed.

5. Scope of Data Subject to Deletion

Data eligible for deletion may include:

• Customer account information
• User profile data
• Customer-provided content and documents
• Application metadata associated with the customer account

Data may be retained where required by:

• Applicable laws or regulations
• Contractual obligations
• Legitimate business or security purposes

6. Deletion Timeframe

Verified data deletion requests are fulfilled within 30 days of confirmation, unless a longer period is required by law.

Customers will be notified once the deletion process has been completed.

7. Backups and Retention

Customer data stored in system backups is retained in accordance with internal backup retention schedules. Deleted data is not restored after fulfillment of a deletion request, except where required for disaster recovery within the retention period.

8. Recordkeeping

Contracts Connected maintains internal records of data deletion requests and their resolution for audit and compliance purposes.

9. Policy Review

This policy is reviewed periodically and updated as needed to reflect changes in legal, regulatory, or operational requirements.