Qistiq Advance Data Retention Policy

1. Purpose

The purpose of this Policy is to:

• •Comply with applicable laws and regulations.
• •Prevent fraud and identity theft.
• •Support AML and KYC requirements.
• •Maintain business records.
• •Resolve disputes and investigations.
• •Protect customer accounts.
• •Support security monitoring.
• •Preserve legally required records.

4. Account Deletion Requests

Customers may request account deletion through the Qistiq application or customer support. However, Qistiq may retain certain information after account deletion requests for legal compliance, regulatory requirements, fraud prevention, AML compliance, KYC compliance, collection activities, tax obligations, accounting obligations, and contract enforcement.

Account deletion does not eliminate outstanding repayment obligations.

5. Account Closure

When an account is closed: access to services may be terminated, personal information may be archived, regulatory retention periods continue to apply, and repayment obligations remain enforceable.

6. Legal Holds

Qistiq may suspend normal deletion schedules when records are required for litigation, court proceedings, government investigations, regulatory reviews, fraud investigations, or compliance reviews.

Records subject to a legal hold may be retained beyond standard retention periods.

7. Fraud Prevention Retention

Qistiq may retain information longer when necessary to detect duplicate accounts, prevent identity theft, prevent account abuse, detect payment fraud, prevent money laundering, and investigate suspicious activity.

8. Data Archiving

Inactive records may be transferred to secure archive systems. Archived records remain subject to security controls, access controls, retention requirements, and regulatory obligations.

9. Data Deletion

When retention requirements expire, Qistiq may permanently delete information, anonymize information, aggregate information for analytics, or remove identifying elements.

Deletion methods may vary depending on technical requirements and legal obligations.

10. Data Security

Qistiq uses commercially reasonable safeguards to protect retained information, including encryption, access controls, multi-factor authentication, audit logging, security monitoring, secure backups, and role-based permissions.

Access is limited to authorized personnel.

11. Third-Party Service Providers

Qistiq may use third-party providers for cloud storage, identity verification, payment processing, customer support, analytics, and security monitoring.

Third-party providers may retain information according to contractual and legal requirements.

12. International Data Processing

Information may be stored and processed in countries where Qistiq or its service providers operate. Qistiq takes reasonable measures to protect information during international transfers and processing.

13. Customer Rights

Subject to applicable law, customers may request access to personal information, correction of inaccurate information, deletion of eligible information, and information regarding retention practices.

Certain requests may be restricted where legal obligations require retention.

14. Policy Changes

Qistiq may modify this Data Retention Policy at any time. Updated versions become effective upon publication or notification as permitted by applicable law.