Data Retention Policy

Last updated August 14, 2026

1. Introduction

This Data Retention Policy outlines how WAVEFORM LABS LTD ("we," "us," "our") handles the data you provide while using our web application, Lot Locker (the "App"), and any related services (collectively, the "Services").

We are committed to protecting your privacy and processing your data in accordance with the principles of data minimisation and storage limitation. This policy explains our approach to retaining your personal data, our use of secure cloud infrastructure, and the process for data deletion.

All user data is securely stored and processed on Amazon Web Services (AWS) infrastructure.

2. Data Retention Period

Our guiding principle is to retain personal data only for as long as it is necessary to provide you with our Services.

In practice, this means that we retain all data associated with your account for as long as your account remains active. An active account is one that has not been explicitly terminated by you.

We do not automatically delete data for inactive accounts. The data is stored until you, the user, explicitly request the closure and deletion of your account. Subscription and invoice records may be retained longer where required for tax and accounting obligations.

3. Account & Data Deletion Process

You have the right to request the deletion of your account and all associated personal data at any time.

To initiate the account deletion process, you must send an explicit request to our support team via email.

• Email your request to: [email protected]
• Subject Line: Please use the subject line "Account Deletion Request" to ensure your request is handled promptly.
• Verification: For security purposes, we will need to verify your identity as the account owner. The request must be sent from the email address associated with your Lot Locker account. We may ask for additional information to confirm your identity.

Upon receiving and verifying your request, we will permanently and irretrievably delete your account and all associated data from our live production systems within 30 days. This action cannot be undone, and your data will not be recoverable.

Please note that residual copies of your data may remain in our secure, encrypted backup systems for a limited period (typically up to 60 days) after deletion from our live systems, after which they will be permanently erased as part of our backup rotation cycle. During this backup retention period, your data is not accessible for any operational purpose.

4. Categories of Data Retained

The data we retain is essential for the functionality of the App and to maintain your user experience. This includes, but is not limited to:

• Account Information: Your name, email address, and encrypted authentication credentials.
• Customer Data: Properties, buyers, deals, custom fields, fee settings, and other records you create in the App.
• Billing Data: Subscription status and related identifiers needed to operate Stripe billing (full card numbers are not stored by us).
• Connection and Usage Data: Information related to your interactions with the Services, such as login history, feature usage, and technical log data, which we use to improve and secure the App.

5. Changes to This Policy

We may update this Data Retention Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new policy on this page and, where appropriate, through other communication channels within the App.

6. Contact Us

If you have any questions or concerns about this Data Retention Policy or our data handling practices, please contact us: