1. Retention Principles & Purpose
ZoraGram adheres to the data minimization principle: personal data is stored only for as long as necessary to provide social networking services, maintain community safety, honor legal requirements, and resolve user inquiries.
2. Active Account Data Lifecycle
While your account remains open and active:
- Profile & Posts: Your profile details, photographs, reels, captions, and comments remain accessible to your followers and public discovery grids.
- Direct Messages: Chat history and media attachments remain visible to you and the conversation participant until deleted.
- Server Access Logs: IP addresses and API connection logs are retained for a rolling 90-day window for fraud detection and network security.
3. The 7-Day Deactivation Grace Period
When you request account deletion (in-app or via our Data Deletion Page):
- Your account immediately enters a 7-Day Deactivation Grace Period.
- Your profile is hidden from search, reels feeds, and follower lists. Other users cannot message or interact with you.
- If you change your mind, logging into your account with your credentials before the 7 days expire will cancel the deletion request and restore your profile.
4. Permanent Data & Media Purge
Once the 7-day grace period concludes:
- Our automated cleanup daemon permanently purges your user record, authentication tokens, bio, and social connections from our primary production MySQL database.
- All uploaded media files (profile avatars, post images, video reels, and chat attachments) stored on file systems are permanently deleted from disk.
- Once purged, this information cannot be restored or recovered by user support.
5. Banned Accounts & Legal Preservation
Where an account has been suspended or terminated for severe Community Guideline violations (e.g. child endangerment, severe harassment, violent extremism):
- Basic identifiers (email, telephone number, device fingerprint, and violation logs) are retained for up to 180 days (6 months) to enforce security bans, prevent ban evasion, and fulfill statutory obligations under the Indian Information Technology Rules, 2021.
- Following the compliance retention period, personal records are permanently erased.
6. System Backups & Disaster Recovery
ZoraGram maintains encrypted system backups solely for disaster recovery and business continuity. Data residing within rotating archival backups is overwritten and phased out within a 30-day lifecycle.