Data Retention & Records Policy
How X2 retains, archives, deletes and preserves account, rights, financial, verification and security records.
1. Retention Principle
X2 retains information for legitimate operational, contractual, rights, accounting, tax, security, fraud-prevention, dispute-resolution and legal purposes. Data is not intended to be kept indefinitely without purpose.
2. Internal Retention Schedule
Retention periods may differ by data category and jurisdiction. X2 may maintain an internal schedule defining the lifecycle for active, archived, anonymized and deleted records.
3. Account Data
Basic account information may be retained while an account is active. After closure, information no longer required may be deleted or anonymized.
4. Rights History
Ownership, control, shares, territories, rights transfers, claims, disputes, evidence and registration history may need longer retention. Historical rights states should not be silently overwritten.
5. Distribution Records
X2 may retain release, delivery, provider-response, metadata, identifier, update and takedown history for audit, support and rights purposes.
6. Financial and Tax Records
Statements, reconciliation, payout history, invoices, tax records, chargebacks and other financial information may be retained for accounting, tax, audit, dispute and legal obligations.
7. KYC and KYB Records
Identity and business-verification data should be retained only as necessary. Where a specialist provider performs verification, X2 may retain verification status and references instead of full document copies where appropriate.
8. Professional Verification
Professional roles, identifiers, manual-review decisions, supporting evidence, expiry dates and registration status may be retained to preserve verification history and prevent contradictory future actions.
9. AI Verification
X2 may retain AI declarations, verification results, provenance, licence evidence, technical review history and provider-eligibility decisions.
10. Claims and Anti-Fraud
Claim history, enforcement decisions and confirmed fraud records may be retained after account closure where necessary for rights protection, repeat-offender prevention, security, provider compliance or legal claims.
11. Closed Investigations
Where an investigation closes without a confirmed violation, the user is not treated as having a strike. Any retained investigation record should be proportionate to legitimate security and audit needs.
12. API and Security Logs
X2 may retain authentication, API, administrative and security logs for debugging, billing, usage calculation, abuse detection, incident investigation and audit. Sensitive actions may require longer audit retention.
13. Account Deletion
Deleting an account does not necessarily delete rights history, financial records, tax records, confirmed fraud evidence, legal claims or other information X2 has a lawful reason to retain.
14. Legal Holds
Normal deletion may be suspended where information is relevant to litigation, regulatory inquiry, rights disputes, fraud investigation or another legal claim.
15. Backups
Deleted information may remain temporarily in secure backup or disaster-recovery systems until the applicable backup lifecycle expires. Such copies should not be used for ordinary processing after deletion from active systems.
16. Anonymization
Where appropriate, X2 may retain properly anonymized information for statistics, security analysis, service improvement or historical reporting.
17. Access Controls and Integrity
Retained records should be protected against unauthorized access and silent alteration, particularly where they form rights, financial, verification or enforcement history.