Legal & Policies

Data Retention Policy

GATHWAYVersion 1.0 (Founder's Edition)
Effective Date: August 9, 2026

1. Purpose

This Data Retention Policy explains how GATHWAY collects, retains, archives, and deletes information throughout its lifecycle.

Our objectives are to:

Protect user privacy.

Meet legal and regulatory obligations.

Reduce unnecessary data storage.

Maintain system integrity.

Support business continuity.

This policy should be read together with the Privacy Policy and Terms of Service.

2. Scope

This policy applies to information processed through:

GATHWAY Web

GATHWAY Mobile Applications

APIs

AI Services

Cloud Infrastructure

Customer Support Systems

Internal Administrative Systems

3. Data Categories

Examples include:

Account Information

Name

Email address

Login credentials

Account preferences

Security settings

Professional Information

Resume

Employment history

Education

Skills

Certifications

Career goals

User Content

Uploaded documents

Notes

Career plans

Calendar entries

Tasks

Saved opportunities

AI Interaction Data

User prompts

AI responses

AI-generated documents

Usage logs

Technical Information

Login history

Device information

Crash reports

Performance logs

Security logs

Payment Information

Subscription records.

Payment card information is processed by our payment providers and is not stored by GATHWAY except where necessary for transaction records.

4. Retention Principles

We retain personal information only for as long as necessary to:

Provide the Services.

Maintain account functionality.

Meet legal obligations.

Resolve disputes.

Detect fraud.

Protect security.

Enforce our agreements.

We aim to minimize retention where practical.

5. Standard Retention Periods

The periods below are default targets and may vary where required by law, litigation, or legitimate business needs.

Specific retention periods may be adjusted as the product and legal requirements evolve.

6. User Deletion Requests

Users may request deletion of their account where available.

Following a valid deletion request:

Personal information will be removed or anonymized where appropriate.

Some information may be retained if required by law, for fraud prevention, dispute resolution, security, or other legitimate purposes.

Where deletion cannot be immediate because of backup systems, the information will be removed as those backups cycle out in accordance with our operational procedures.

7. Account Inactivity

If an account remains inactive for an extended period, GATHWAY may:

Notify the user.

Offer options to retain or delete the account.

Archive or delete inactive data where permitted by law and our policies.

8. Backups

To support disaster recovery and business continuity:

Data may be included in encrypted backups.

Backup data is retained for a limited operational period.

Backups are protected with appropriate security controls.

Deleted data may remain in backup media until the backup expires or is overwritten.

Backups are not used to restore individual user data except where operationally necessary.

9. Legal Holds

If GATHWAY becomes subject to litigation, regulatory investigation, or other legal obligations, certain information may be preserved beyond normal retention periods until the matter is resolved.

10. Secure Disposal

When information reaches the end of its retention period, GATHWAY will take reasonable measures to securely delete, anonymize, or otherwise dispose of it in accordance with applicable law and industry practices.

11. Policy Review

This policy will be reviewed periodically and updated as necessary to reflect:

New features.

Business growth.

Changes in law.

Security improvements.

Operational requirements.

Material updates will be communicated where required.

12. Contact Information

Questions regarding this policy may be directed to:

GATHWAY Privacy Team

Website: https://gathway.app

Privacy: privacy@gathway.app

General Contact: hello@gathway.app

Our Commitment

GATHWAY is committed to retaining information responsibly, deleting data when it is no longer needed, and giving users transparency about how their information is managed throughout its lifecycle.