Data Retention & Security Policy
AiCert° / AI Energy Limited · Version 2.0 — Effective 13/08/2026
1. Purpose
This Policy explains how AiCert° approaches data retention, backup and security for the Services.
2. Retention principle
We retain information only for as long as needed for service delivery, legitimate business purposes, legal obligations, dispute resolution, fraud prevention and security.
3. Customer content
Customer content remains available according to the subscription and account configuration. Following termination or deletion, content may remain temporarily in backups before being securely overwritten in accordance with our operational retention cycle.
4. Backups
We use routine backups and redundancy appropriate to the Services. Backups are intended for operational recovery and are not a substitute for the customer's own copies of legally or commercially important certificates and records.
5. Security controls
Controls may include encryption in transit, access controls, authentication, least-privilege principles, logging, monitoring, vulnerability management, secure hosting and incident response procedures.
6. Third-party processors
Hosting, payments, analytics, AI, monitoring and other infrastructure may be provided by contracted processors. Current processor details are described in the Privacy Policy and may be updated from time to time.
7. Security incidents
Where required by law, we will assess and notify relevant parties of personal-data breaches. Customers should promptly report suspected compromise of their accounts.
8. Customer responsibilities
Customers must protect credentials, use appropriate devices, maintain authorised users, avoid sharing accounts and keep independent copies of critical records.
9. Anonymised data
Anonymised data that can no longer reasonably identify an individual or property may be retained after account termination for lawful purposes.
10. Contact
Security and data-retention enquiries: aienergy.maintain@gmail.com.