1. Purpose
This Data Retention Policy describes how long Vertex CRM retains categories of information. Exact retention for a customer deployment may also be set by contract, the customer’s own policies, or applicable law (including India’s DPDP Act where relevant).
2. Account and authentication data
User accounts, hashed passwords, roles, and MFA settings are retained while the user is active in a tenant and for a limited period after deactivation to support security investigations and restore mistakes, unless earlier deletion is requested and lawful.
3. CRM business data (tenant-controlled)
Accounts, contacts, leads, opportunities, activities, tasks, cases, filings, and similar records are retained for the life of the customer subscription (and any contractual wind-down/export period). Customers may delete individual records earlier inside the product according to their permissions.
4. Meta / messaging integration data
- OAuth tokens: retained until the customer disconnects the integration, the token expires and is refreshed/replaced, or a Meta data-deletion callback removes connections for that Facebook user.
- Synced ads campaign cache: retained while the connection exists; removed when the connection is deleted.
- Inbound WhatsApp / Lead Ads payloads converted into CRM leads or inbox messages: retained as tenant CRM data under section 3.
5. Logs and security records
Application logs, audit logs, and abuse-prevention records may be retained for a limited operational period (commonly 90 days to 24 months depending on log type) to secure the Service and investigate incidents.
6. Marketing site / contact enquiries
Messages submitted via /contact may create an internal sales lead and are retained for sales follow-up and anti-spam purposes unless deletion is requested.
7. Backups
Deleted data may persist in encrypted backups for a rolling backup window before being overwritten. Restores are controlled and not used to circumvent active deletion requests except for disaster recovery.
8. Contact
For retention or deletion questions, see Data Deletion and Contact.
Last updated: August 2026.