globiq.solutions← back to site

Data Retention Policy

Last updated: June 9, 2026

This policy explains how long Globiq Trading (FZE) (operating as “Globiq Solutions”) retains personal and business data collected through the Site and our Services (TapDeliver, RestauBooks, LoopLogic). It complements our Privacy Policy.

1. Retention principles

We retain personal data only as long as we have a lawful basis to:

  • Deliver the Service the data was collected for;
  • Meet legal or regulatory record-keeping obligations (e.g. UAE VAT/tax records — 5 years);
  • Defend against legal claims;
  • Honor an active contractual relationship with a client tenant.

When none of these apply, the data is deleted or anonymised within the periods stated below.

2. Retention periods by data type

2.1 Buyer chat messages (LoopLogic)

  • Active conversation: retained for the duration of the conversation plus 30 days for buyer reference.
  • After conversation resolution: message bodies are automatically wiped 60 seconds after the quote is sent to the buyer; only the structured quote record (number, line items, totals, contact) is preserved for invoicing.
  • Buyer contact record:retained for the life of the tenant’s account plus 90 days, or until the buyer requests deletion (see Data Deletion).

2.2 WhatsApp messages (via Meta Cloud API)

  • Message bodies are stored on our infrastructure for 90 days after the conversation closes, then automatically deleted.
  • Media (images, PDFs) sent or received via WhatsApp is retained for 30 days, then deleted from our storage.
  • Phone numbers are retained for the life of the tenant’s account or until the buyer requests deletion.
  • We do not retain WhatsApp authentication credentials beyond the life of the connection. When a tenant disconnects, the access token is revoked and erased.

2.3 Quotes, invoices and order records

  • 7 years. Required under UAE Federal Decree-Law No. 47 of 2022 on corporate tax + UAE VAT record-keeping rules. These records cannot be deleted on demand for the retention period, even if the buyer or tenant requests it.

2.4 Account / tenant administrator data

  • Active accounts: retained for the life of the subscription.
  • Cancelled accounts: primary data deleted within 30 days of cancellation. Backups containing the data are rotated out within 90 days.

2.5 Authentication, audit logs and security data

  • Sign-in events / audit logs: 12 months.
  • Web server / API logs: 30 days (Vercel platform default).
  • Error reports (Sentry / internal): 90 days.

2.6 Billing and payment records

  • 10 years. Required for UAE tax audits. Payment card numbers are never stored on our systems — they are tokenised by the payment processor.

2.7 Marketing communications

  • Email addresses on marketing lists: retained until unsubscribe, then retained on a suppression list to honour the unsubscribe.

3. How deletion works

When the retention period expires, records are either hard-deleted (overwritten in the database) or anonymised (personal identifiers stripped, structural data kept for aggregate statistics). Backups containing the data are purged on the next rotation cycle (≤ 90 days for production backups).

4. Requesting earlier deletion

You may request deletion of your data at any time, subject to the legal retention obligations listed above. See our Data Deletion page for the process and SLA.

5. Changes to this policy

We may update this Data Retention Policy from time to time. We will notify tenants by email of material changes, and the effective date will be reflected in the “Last updated” line above.

6. Contact

Questions about retention or to invoke any of the rights above, contact hello@globiqsolutions.com.