1. Purpose

This Backup and Data Retention Policy outlines Website Wannabe's commitment to safeguarding client data through regular backups and specifies the duration for which data is retained. The policy ensures data integrity, availability, and compliance with applicable regulations.

2. Scope

This policy applies to all client data stored, processed, or managed by Website Wannabe, including data related to website development, hosting, and maintenance services.

3. Data Backup

Frequency: Client data is backed up hourly to ensure minimal data loss in case of unforeseen events for a period of one week. Daily backups follow for the preceding three weeks. Monthly backups remain for the preceding 12 months.
Storage: Backups are stored on a third-party server, separate from the server running your websites or data, to protect against data loss due to localized incidents.
Encryption: All backup data is encrypted during transit and at rest to maintain confidentiality and integrity.

4. Data Retention

Retention Period: Partial backups are retained for a period of 12 months. After this period, backups are securely deleted to manage storage resources effectively.
Extended Retention: Clients requiring longer retention periods must request this service in writing. Additional fees may apply based on the extended retention duration and storage requirements.

5. Data Restoration

Request Process: Clients can request data restoration by contacting Website Wannabe's support team. Restoration requests are typically processed within 24 hours.
Limitations: Restorations are limited to the data availability stated in section 2.

6. Connected Account Data (Google and Other Third-Party Services)

Tokens and credentials: When you connect a Google account (or any other third-party account) to our platform, we store the associated OAuth access and refresh tokens encrypted at rest. These credentials are retained only as long as the connection is active.
Cached data: Data we fetch from Google APIs on your behalf (Business Profile attributes, Analytics readings, Search Console performance, Ads reports, Tag Manager containers) is cached only as long as it is needed to display in your dashboard or process pending automations.
Disconnecting: You can disconnect any third-party service at any time from the Connections page in our customer dashboard. Disconnecting revokes our tokens with the upstream provider and queues all cached data from that connection for deletion within 30 days.
Full data deletion: You can request deletion of all personal information we hold (including all Google user data) by emailing support@websitewannabe.com. We acknowledge requests within 5 business days and complete deletion within 30 days unless a specific record must be retained to comply with applicable law. Aggregated, anonymized analytics that cannot be tied back to your account may be retained.

7. Client Responsibilities

Data Accuracy: Clients are responsible for ensuring the accuracy and completeness of the data provided to Website Wannabe.
Compliance: Clients must comply with all applicable data protection regulations and inform Website Wannabe of any specific data handling requirements.

8. Policy Review

This policy is reviewed annually or as required to ensure its effectiveness and compliance with evolving industry standards and regulations.

Backup and data retention policy