Data Retention

We keep personal information only as long as we need it for the purposes described in our Privacy Policy, or as required by law — then we delete or de-identify it. This schedule sets out, by category, how long we retain information. Periods are guidelines; actual retention can be shorter, or longer where a legal obligation, dispute, or investigation requires it.

Retention by category

• Account information (name, email, phone, password) — for as long as your account is active. On account deletion it is erased or anonymized promptly (see below).
• Saved addresses & preferences (delivery addresses, dietary prefs) — while your account is active; deleted with your account.
• Reservations — retained while active and for a reasonable period afterward for support and dispute resolution, then de-identified.
• Orders, payments & receipts — retained in de-identified form as required by tax and financial-record law (generally up to 6–7 years in Canada), even after account deletion. We do not store full card numbers; card data is handled by Stripe.
• Reviews and Snap content — until you delete them or delete your account. Snap content you approved and that was already published to a social account may remain on that platform, subject to that platform’s rules.
• Concierge conversations (“Hey Cenaiva”) — retained for a limited period to operate and improve the service, then deleted or de-identified.
• Support communications — kept for a limited period after your request is resolved.
• Device & usage logs (IP, app version, diagnostics) — kept for a short period for security and troubleshooting, then deleted or aggregated.
• Push notification tokens — until you disable notifications or delete your account.
• Verification codes (OTP) — expire within minutes and are removed shortly after.
• Backups — encrypted backups roll on a limited cycle (currently up to 30 days); deleted data ages out of backups within that window.

What happens when you delete your account

When you delete your account (Account → Delete account), we erase or anonymize your personal information — profile, saved addresses, preferences, login credentials — and sign you out everywhere. Records we are legally required to keep, such as order and payment records, are retained in de-identified form for the periods above and are no longer linked to your identity.

De-identification

Where we retain information for statistics or legal record-keeping, we remove or obscure the details that identify you so it can no longer reasonably be linked back to you.

Contact

Questions about retention, or a request to access or delete your information, can be sent to privacy@cenaiva.com. See the Privacy Policy for your full rights under PIPEDA and Québec Law 25.