Effective Date: January 1st, 2025
Overview
This data retention policy (“DRP”), including the annex below, is part of our Terms, Purchase Terms and General Use Term, also referred to as ‘Subscription Services Agreement’ has and applies only to the extent stated within them (see the Privacy and data use section).
This DRP is supplemental to, and forms an integral part of, the Terms, Purchase Terms and General Use Term (”The Agreement”), Data Processing and API terms and is effective upon its incorporation into The Agreement which may be specified in the Terms, Purchase Terms and General Use Term, an Order Form/MSA or an executed amendment to the Terms, Purchase Terms and General Use Term.
In case of any conflict or inconsistency with the terms of the Subscription Services Agreement/MSA, this DRP will take precedence over the terms of the The Agreement to the extent of such conflict or inconsistency.
The term of this DRP will follow the terms of the The Agreement. Terms not otherwise defined in this DPRP will have the meaning as set forth in the Agreement.
Version: 1.01. Purpose
This policy explains how long ResellerRatings retains personal information and how that information is handled when it is no longer needed.
It supplements our Privacy Policy and applies to information provided by reviewers, shoppers, merchants, and other users of our services.
2. Our Retention Principles
ResellerRatings retains personal information only for as long as reasonably necessary to:
Provide and improve our services.
Collect, verify, publish, and moderate ratings and reviews.
Maintain reviewer and merchant accounts.
Prevent fraud, abuse, and security incidents.
Honor communication preferences and privacy requests.
Meet contractual, accounting, and legal obligations.
Establish, exercise, or defend legal rights.
Maintain the reliability and integrity of our ratings and reviews.
We may delete or de-identify information earlier when it is no longer needed.
We may retain information longer when reasonably necessary for legal compliance, litigation, disputes, fraud prevention, security, contractual obligations, or the continued operation of our services.
Information
Standard Retention Policy
Shopper names, email addresses, order numbers, uploaded files, and similar information used to send review invitations
Generally 12 months after the final invitation
Review-invitation delivery, open, click, bounce, and response records
Generally 12 months
Shopper information where no review was submitted
Generally 12 months after the last activity
Published ratings and reviews
For as long as the review remains published or is reasonably useful to the integrity of the service
Email addresses, IP addresses, order information, and other non-public information associated with a published review
Generally up to 24 months, unless needed longer for verification, service features, fraud prevention, security, a dispute, or legal compliance
Active reviewer and merchant accounts
For as long as the account remains active
Inactive reviewer accounts
Generally up to 24 months after the last account activity or more depending on review activation
Fraud, moderation, and review-dispute records
Generally up to three years after the matter is closed
Application and security logs
Generally up to 30 days, unless related to a security incident, investigation, or dispute
Customer-support records
Generally up to three years after the matter is closed
Merchant account and contract records
During the business relationship and generally up to three years afterward
Financial, tax, and transaction records
Generally seven years or for another period required by law
Privacy requests and deletion records
At least two years
4. Published Reviews and Personal Information
Published ratings, reviews, and related non-sensitive information may be retained for as long as the review remains published or is reasonably necessary to maintain the history, reliability, and integrity of our services.A published review may remain available after the reviewer’s email address, IP address, order number, or other private identifying information has been deleted or de-identified.If a reviewer account becomes inactive, we may delete or de-identify the personal information associated with the account. Published reviews may remain available under a de-identified or pseudonymous identifier where permitted by law.
5. Review-Invitation Information
Names, email addresses, order references, and similar information provided to send review invitations are generally retained for approximately 12 months after the invitation process is completed.
In some cases, this information may be retained for up to 24 months when reasonably necessary to provide a service, investigate delivery issues, prevent fraud, verify a review, resolve a dispute, or meet a contractual or legal obligation.If a shopper does not submit a review, the shopper’s invitation information will normally be deleted or de-identified after the applicable retention period.
6. Deletion and De-Identification
At the end of the applicable retention period, information may be:
(1) Permanently deleted.
(2) Aggregated so that it no longer identifies an individual.
(3) De-identified or replaced with a non-identifying reference.
(4) Retained in a restricted form when required for legal, security, fraud-prevention, or compliance purposes.
(5) Anonymous or aggregated information that cannot reasonably be linked to an individual may be retained for reporting, analytics, research, and service improvement.
7. Backups
Personal information may remain temporarily in secured backups after it has been removed from our active systems.Backups are generally overwritten or deleted within 90 days through our normal backup cycle.If a backup is restored, information previously scheduled for deletion will be removed again where reasonably practicable.
8. Exceptions
The periods in this policy represent our standard retention practices. Actual retention may vary depending on the nature of the information and why it was collected.We may retain information longer when reasonably necessary to:
Comply with a law, court order,
subpoena, or regulatory requirement.
Respond to litigation, threatened claims, investigations, or disputes.
Detect or prevent fraud, abuse, or security incidents.
Enforce our agreements or protect our legal rights.
Verify the authenticity of a rating or review.
Honor a communication preference or privacy request.
Fulfill a contractual obligation.
Maintain or provide an active feature or service.
9. Privacy Requests
Depending on where an individual lives, they may have the right to request access to or deletion of their personal information.
Requests may be submitted using the privacy contact method identified in our Privacy Policy.
We may retain certain information where permitted or required by law, including information needed to protect the integrity of published reviews, prevent fraud, resolve disputes, or honor an opt-out request.
10. Changes to This Policy
We may update this policy as our services, legal obligations, or data practices change.Updates will be posted with a revised effective or “last updated” date.