GoRefer Trust Center

Data Retention

Updated April 2026

GoRefer retains data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law. Different workflows have different retention mechanisms. This page distinguishes scheduled Gio cleanup from account and record-deletion requests.

Retention Policy

GDPR rights & policies

Firm Record-Keeping Responsibilities

Retention Schedule

Updated April 2026

Data Category	Retention Period	Deletion Trigger	Notes
Account & profile data	Account policy	Account closure or verified deletion request	Cancellation records a retention deadline; there is no automatic whole-account purge on that deadline.
Tax client records and PII	Firm and legal requirements	Authorized record deletion or verified erasure request	Your firm determines applicable record-keeping obligations. The practice retention ledger records decisions; it does not itself destroy source records.
Payment & billing records	Applicable financial obligations	Reviewed after required retention ends	Billing and payout records may need to be retained for tax, dispute and accounting purposes.
Audit & authentication logs	Workflow-specific	Automatic log expiry or a reviewed deletion request	Retention differs by log; there is no single 365-day guarantee for all audit data.
Email / communication logs	Service and legal requirements	Provider settings and reviewed requests	Contact privacy@gorefer.io for the applicable retention scope.
Error tracking (Sentry)	Set in Sentry	Provider retention and deletion controls	Error monitoring and masked session replay have separate provider settings.
Marketing analytics	Depends on the system	Browser storage clearing and server retention policy	First-party visitor IDs persist until you clear site data; session IDs last for the browser session.
Gio cases and related documents	90 days from case creation	Daily automatic cleanup	Removes expired case content and related records. If a stored file cannot be deleted, the failure is logged. This is separate from general account retention.

Account & Data Deletion

Updated April 2026

Account Deletion Process

Admin-initiated deletion
A firm admin can use account cancellation tools and contact privacy@gorefer.io for a full deletion request
Cancellation and access
Cancellation changes subscription access and records retention information. It is separate from a verified erasure request.
Reviewed deletion
Contact privacy@gorefer.io to request erasure. We check any legal holds and which data is in scope before deleting.
Confirm completion
Ask us to confirm which records were deleted and which had to be kept. A cancellation countdown on its own does not mean data has been erased.

Legal Hold & Retention Exceptions

Tax record-keeping obligations
Retention periods vary by record type and applicable law; your firm must determine and document the appropriate period
Active dispute hold
Data may be retained pending resolution of a billing dispute or legal claim
Law enforcement requests
Valid legal orders may require temporary retention of specific data
Anonymization alternative
Where the law prevents deletion, we review access and continued retention; we do not automatically anonymize data instead

Data Export & Portability

Updated April 2026

Request or create an authorized export

GoRefer supports authorized exports of selected firm records in CSV files packaged as a ZIP archive. What an export contains depends on the type of export, your permissions and your account status. Exports can contain sensitive data. Use the available Data Export controls or contact privacy@gorefer.io for help.