Data Retention Policy

This policy explains Zarova's practical retention approach for information collected through the website, accounts, dashboards, application workflows, CMS publishing tools, analytics, and related support channels.

Retention periods may vary where a shorter period is required by law, a longer period is reasonably needed for security, legal claims, or abuse prevention, or a user request is valid and can be completed without overriding obligations.

Zarova's approach is to retain only while needed for the purpose collected, legal obligations, security, dispute resolution, or other legitimate business purposes.

Where a record is no longer needed, Zarova may delete it, anonymize it, or keep it only in restricted backup or security records where immediate deletion is not practical.

Account identifiers, profile fields, dashboard preferences, and optional profile pictures are normally retained for as long as the account remains active or is needed to provide account-related functionality.

If an account deletion request is submitted, Zarova uses a 30-day grace period before permanent cleanup. During that period, the request may be cancelled where the product flow allows it. After the grace period, account profile data is deleted or anonymized unless retention is needed for legal, security, abuse-prevention, or dispute purposes.

Careers applications, opportunity responses, LibraNex Private Beta interest submissions, review status, and user-visible application records are retained while the relevant opportunity, review process, or relationship remains active.

Closed applications and related review records are normally retained for up to 24 months after the relevant opportunity or review cycle ends, unless a longer period is needed for legitimate administration, legal claims, or security review.

Uploaded files may include resumes, supporting documents, profile avatars, CMS media, cover images, and article gallery images. Files connected to applications are normally retained with the application record. Profile avatars are retained until removed, replaced, or the account is deleted.

CMS media and public content assets are retained while they are needed for published or draft content, editorial records, product pages, or archival continuity. External manual image URLs are not stored as uploaded files by Zarova.

Legal acceptance records, including document type, document version, acceptance timestamp, and account association, are retained for the life of the account and may be retained for up to six years after account closure or deletion where needed to evidence acceptance, resolve disputes, or satisfy legal obligations.

Zarova uses consent-gated Vercel Analytics and Speed Insights to understand public website usage and performance. Analytics data is reviewed in aggregate where possible and retained only for as long as reasonably needed to understand product interest, site health, and performance trends.

Zarova normally retains operational analytics review windows for no longer than 24 months, subject to provider controls, configuration, and aggregation behavior.

Hosting, authentication, storage, error, and security logs may be retained to operate the site, troubleshoot incidents, investigate abuse, protect accounts, and maintain service reliability.

Routine operational logs are normally retained for up to 12 months. Security incident records, breach investigation notes, and evidence required for legal or abuse-prevention purposes may be retained for up to six years where appropriate.

Database, storage, and deployment backups may temporarily contain copies of account, application, content, or media records after the live system has changed. Backups are retained for resilience, recovery, and security purposes.

Zarova normally retains routine backups for no longer than 90 days, unless a provider-managed backup schedule, incident response need, legal hold, or recovery requirement makes a longer period necessary.

Zarova reviews retention needs as the product changes. Where records are no longer needed, they may be deleted, anonymized, or archived in a way that limits active use.

Users can contact Zarova with questions about retention or requests relating to access, correction, deletion, or restriction rights that may apply in their location.

For questions about this document or Zarova's legal and governance policies, visit the Contact page or email contact@zarova.one.