Creator OS
Reis Media LLC · Data Governance

Data Retention & Deletion Policy

What we keep, how long we keep it, and exactly how you delete your data — reviewed periodically and designed to support our obligations under privacy law.

Effective June 9, 2026 Version 1.0 Owner Philipe Reis, Founder Review at least annually

01Principle

Keep what you use. Delete what you ask us to. Hold nothing longer than we need.

Reis Media LLC retains personal data only for as long as it is needed to provide Creator OS to you, to meet a legal obligation, or to resolve disputes and enforce our agreements. When data is no longer needed for those purposes, it is deleted or anonymized.

02What we keep & how long

DataRetention
Account data (email, name, settings)While your account is active; deleted on account deletion.
Financial data (Plaid, CSV or manual transactions)Until you disconnect the source or delete your account; Plaid tokens revoked on disconnect.
Time / energy data (Rize, Whoop, manual)Until you disconnect the source or delete your account.
Content you create (goals, journals, systems, notes, products)While your account is active; deleted on account deletion.
Billing recordsRetained as required for tax/accounting law (typically up to 7 years), held by Stripe and in our records.
Encrypted backupsShort rolling window, then automatically overwritten (see §5).
Operational/usage logsKept briefly for security & troubleshooting, then rotated out.

03How you delete your data

You can delete your data at any time:

  • By email — write to admin@philipereis.com and ask us to delete your data. We verify the request comes from you, then carry it out. This is the current method, and it fully removes your data.
  • In the app — disconnecting a connected source removes that data; a one‑click "delete my whole account" control inside the app is a planned addition.

04What happens when you delete

  • Your account and personal data are removed from our active database, normally within 30 days of your request.
  • Any Plaid access tokens are revoked, severing the bank connection so no further data is received.
  • Per‑user Row‑Level Security means your data was already isolated to your account; deletion removes those rows entirely.
  • We confirm to you when deletion is complete.
Disconnect vs delete

Disconnecting a source stops new data and revokes that connection. Deleting your account removes everything we hold about you, subject only to the legal records in §6.

05Backups

We keep routine, encrypted backups of the database so data can be recovered after a failure. Backups are kept for a short rolling window and then automatically overwritten. When you delete your data, any copy still present in a backup is purged on the normal backup rotation — it is not restored into the live system except as part of a genuine disaster recovery, after which the deletion is re‑applied.

07Periodic review

This policy and our retention periods are reviewed at least once a year (and when the law or our product materially changes) to confirm we are not holding data longer than necessary and that our practices are reviewed against our obligations under applicable privacy laws such as the GDPR and California's CCPA/CPRA. The Founder is responsible for this review.

08Contact

Questions or deletion requests: admin@philipereis.com.

Reis Media LLC · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA.