Data Retention & Deletion Policy

DATA RETENTION & DELETION POLICY

VenueVibe App

Company: JayWorld App, LLC d/b/a VenueVibe App

Effective Date: June 24, 2026

Last Revised: June 28, 2026

Version: 2.0

This Data Retention & Deletion Policy ("Policy") explains how JayWorld App, LLC d/b/a VenueVibe App ("VenueVibe App," "Company," "we," "our," or "us") retains, deletes, archives, anonymizes, and manages user information collected through the VenueVibe App platform, website, mobile application, and related services (collectively, the "Service").

This Policy is incorporated by reference into the Terms of Service and Privacy Policy and should be read together with the Privacy Policy, Safety & Reporting Policy, Community Guidelines, and Child Safety Policy.

1. PURPOSE

VenueVibe App retains information only for legitimate business, operational, safety, security, legal, and compliance purposes. We do not retain personal information longer than reasonably necessary for those purposes.

This Policy explains:

What information we retain

How long we retain each category of information

The distinction between deletion and anonymization

When information may be preserved beyond standard periods

How users may request deletion or data export

Your rights regarding your personal information

2. INFORMATION WE RETAIN

The following categories of information may be retained by VenueVibe App:

Account Information: Name, username, email address, date of birth, relationship status, profile information, and user preferences.

Photos and Selfies: Profile photos, selfies, and user-uploaded images.

Venue and Location Activity: Venue selections, venue check-ins, location history, and event participation information.

Communications: Messages exchanged through the platform, customer support communications, safety reports, appeals, and policy violation investigation records.

Subscription and Payment Information: Subscription status, billing history, transaction confirmations, and payment processor reference numbers. Note: Complete payment card numbers are never stored by VenueVibe App.

Technical Information: Device identifiers, IP addresses, login history, usage logs, security logs, crash reports, and analytics data.

Safety and Enforcement Records: Banned account information, device fingerprints, fraud records, and records of serious policy violations.

3. ACTIVE ACCOUNT RETENTION

While an account remains active, VenueVibe App retains information necessary to:

Operate the Service and provide platform functionality

Enable venue-based user connections

Process subscription payments

Prevent fraud and unauthorized access

Investigate abuse and enforce policies

Improve platform performance and security

Comply with legal obligations

Information is retained only as long as reasonably necessary for these purposes.

4. SPECIFIC RETENTION PERIODS

The following retention periods apply to each category of information. These periods represent our standard practice and may be extended where required by law, litigation holds, law enforcement requests, or legitimate safety concerns.

Data Category

Retention Period

Active account information

Duration of account, plus 12 months post-deletion

Profile photos and selfies

Duration of account; deleted or anonymized within 90 days of account deletion

Messages and communications

Up to 12 months from date of message

Venue and location history

Up to 6 months from collection

Customer support records

Up to 3 years

Safety reports and investigations

Up to 5 years

Fraud and security records

Up to 5 years

Banned account and device records

Indefinite (to prevent re-registration)

Payment and financial records

Up to 7 years, or as required by law

Legal and regulatory records

As long as required by applicable law

Law enforcement preservation holds

90 days per 18 U.S.C. § 2703(f), with one 90-day extension

Child safety and CSAM-related records

As required by law and NCMEC reporting obligations

Anonymized and aggregated data

Indefinite (not personal information)

Retention periods begin from the date of collection unless otherwise stated.

5. DELETION VS. ANONYMIZATION — IMPORTANT DISTINCTION

Users should understand the difference between deletion and anonymization, as both may apply to your information upon account deletion.

Deletion means your personal information is permanently removed from our active systems and, following backup rotation schedules, from backup systems as well.

Anonymization means your information is modified so that it can no longer reasonably identify you as an individual. Anonymized data is not considered personal information under applicable law, including the California Consumer Privacy Act (CCPA) and General Data Protection Regulation (GDPR). Anonymized data may be retained indefinitely for analytics and platform improvement purposes.

Upon account deletion, some information will be deleted (such as your name, email, and profile photos) while other information may be anonymized (such as aggregated usage data and venue check-in statistics). We will not represent anonymized data as "deleted" — if you require full deletion of a specific data category, please contact privacy@venuevibeapp.com to make a specific request.

6. ACCOUNT DELETION REQUESTS

Users may request account deletion at any time through:

App Settings: Account → Delete Account

Email: support@venuevibeapp.com

Deletion requests may require verification of account ownership before processing.

Response Timeline: VenueVibe App will process deletion requests within 45 days of receipt and identity verification. We may extend this period by an additional 45 days where reasonably necessary, with advance notice to the user. This timeline is consistent with the California Consumer Privacy Act (CCPA) and applicable privacy standards.

Data Export Before Deletion: Before submitting a deletion request, users may request a copy of their personal data. To request a data export, email privacy@venuevibeapp.com with the subject line "Data Export Request." We will provide available data in a commonly used, machine-readable format within 45 days of the request.

7. WHAT HAPPENS WHEN AN ACCOUNT IS DELETED

When an account deletion request is verified and processed:

Profile Information: Your username, profile information, biography, relationship status, and user preferences will be deleted or permanently anonymized.

Profile Photos and Selfies: Profile photos and selfies will be deleted from active systems within 90 days of deletion processing. Note that photos already displayed to or saved by other users through their own devices cannot be recalled.

Venue and Location History: Venue check-ins and location history will be deleted or anonymized within the standard retention period.

Messages: Messages will be removed from your account view. However, messages previously delivered to other users may remain visible within those users' accounts, subject to system limitations and legal requirements. We are unable to delete copies of messages that have already been received and stored by other users.

Public Profile Visibility: Your account will no longer appear as an active user profile on the platform.

Third-Party Service Providers: When your account is deleted, we will take reasonable steps to notify our active service providers (such as analytics and cloud hosting providers) to delete or anonymize your personal data consistent with their data processing agreements and applicable law. We cannot guarantee the deletion timelines of third-party processors, which are governed by their own privacy policies.

Subscription Information: Deletion of your account does not automatically cancel any active subscription. You must cancel your subscription separately through the App before requesting account deletion to avoid further charges.

8. INFORMATION RETAINED AFTER DELETION

Certain information may be retained after account deletion where reasonably necessary for the following purposes:

Legal Compliance: Court orders, legal obligations, regulatory requirements, and law enforcement requests.

Safety Investigations: Harassment, threat, fraud, abuse, and child safety-related investigations. Safety records may be retained for up to 5 years.

Fraud Prevention and Platform Security: Fraud prevention, spam prevention, account abuse detection, and platform integrity. Security records may be retained for up to 5 years.

Banned and Restricted Accounts: Information necessary to enforce account bans, device bans, and payment-method bans may be retained indefinitely to prevent re-registration and protect platform users.

Dispute Resolution: Records necessary to resolve pending legal claims, enforce agreements, or defend the Company's legal rights.

Payment and Financial Records: Financial transaction records may be retained for up to 7 years as required by tax and financial regulations.

Retained information will be limited to what is reasonably necessary for the applicable purpose.

9. LITIGATION HOLD / LEGAL HOLD

If VenueVibe App becomes subject to litigation, a regulatory investigation, or receives a legal hold notice, standard deletion schedules for relevant data will be suspended for the duration of the hold.

Information subject to a legal hold will not be deleted until the hold is lifted by appropriate legal authority, the litigation or investigation is resolved, or legal counsel determines the hold is no longer required.

Users who have submitted deletion requests during an active legal hold affecting their account will be notified that their deletion request cannot be fully processed until the legal hold is lifted, where such notification is legally permissible.

10. LAW ENFORCEMENT PRESERVATION

Upon receipt of a valid legal preservation request from law enforcement, VenueVibe App will preserve relevant user data — including account information, messages, location history, device identifiers, and related records — for a period of 90 days, consistent with 18 U.S.C. § 2703(f).

One 90-day extension is available upon a timely follow-up request from the requesting authority.

Emergency disclosure requests involving credible risk of imminent danger to a child or any person will be treated as the highest priority and processed as quickly as reasonably possible, consistent with 18 U.S.C. § 2702(b)(8).

Law enforcement legal process should be directed to: legal@venuevibeapp.com

11. CHILD SAFETY AND SERIOUS VIOLATIONS

Information relating to the following may be preserved for extended periods beyond standard retention schedules, as required by law, law enforcement requests, or litigation holds:

Child Sexual Abuse Material (CSAM) investigations

Human trafficking investigations

Serious threats of violence

Criminal investigations involving users

CSAM-related information will be reported and preserved consistent with 18 U.S.C. § 2258A and NCMEC CyberTipline reporting requirements.

Minors' Data — Accelerated Deletion: If VenueVibe App discovers that a user account belongs to an individual under the age of 13, that account and associated personal data will be deleted within 72 hours of discovery, except where preservation is required by law enforcement or legal process. If the user is between 13 and 17, the account will be terminated immediately and data handled consistent with applicable law.

12. BACKUP SYSTEMS

Information may remain temporarily in backup systems after active deletion has been processed. Backup data:

Is not publicly accessible

Is protected by security safeguards and access controls

Is automatically overwritten or purged according to our backup rotation schedule (typically within 90 days)

VenueVibe App is not required to immediately purge information from encrypted backup systems upon a deletion request, but deleted data will not be restored from backup except where required by law, legal hold, or legitimate safety investigation.

13. ANONYMIZED AND AGGREGATED DATA

VenueVibe App may retain anonymized, aggregated, or de-identified information indefinitely. Such information:

Cannot reasonably identify any individual user

May be used for analytics, research, and platform improvement

May be used for business and operational reporting

Is not considered personal information under applicable law

14. DEVICE IDENTIFIERS AND FRAUD PREVENTION RECORDS

To enforce platform bans and prevent re-registration by banned or terminated users, VenueVibe App may retain certain non-personal identifiers associated with banned accounts, including:

Device identifiers (such as advertising IDs)

Device fingerprint data

Payment method references (not full card numbers)

IP address ranges associated with fraudulent activity

This information is retained solely for platform security and integrity purposes and is not used for any other purpose.

15. THIRD-PARTY DATA

Data shared with or processed by third-party service providers (such as Stripe, cloud hosting providers, and analytics services) is subject to those providers' own data retention and deletion policies. VenueVibe App will make reasonable efforts to instruct service providers to delete or anonymize your personal data upon account deletion, consistent with applicable data processing agreements.

Users should review the privacy policies of applicable third-party services for information on their independent data retention practices.

16. YOUR PRIVACY AND DELETION RIGHTS

Depending on your location, you may have the following rights regarding your personal information:

All Users:

Access: Request a copy of personal information we hold about you

Correction: Request correction of inaccurate or incomplete information

Deletion: Request deletion of your personal information, subject to legal retention requirements

Restriction: Request restriction of processing in certain circumstances

Data Portability: Request your data in a commonly used, portable format

California Residents (CCPA/CPRA):

In addition to the above rights, California residents have the right to:

Know the categories and specific pieces of personal information collected

Know whether personal information is sold or shared (we do not sell personal information)

Opt out of the sale or sharing of personal information

Limit the use of sensitive personal information

Non-discrimination for exercising privacy rights

Response Timeline: All privacy rights requests will be responded to within 45 days of receipt and identity verification, with a possible 45-day extension where reasonably necessary.

To submit any privacy rights request, contact: privacy@venuevibeapp.com

We reserve the right to verify your identity before processing any request.

17. CHANGES TO THIS POLICY

VenueVibe App may update this Policy periodically, and will review this Policy at least annually. Material changes will be communicated through in-app notifications, email, or website notices. Continued use of the Service following the effective date of any changes constitutes acceptance of the revised Policy.

18. CONTACT INFORMATION

JayWorld App, LLC d/b/a VenueVibe App

Purpose

Contact

Privacy & Deletion Requests

privacy@venuevibeapp.com

General Support

support@venuevibeapp.com

Safety & Reporting

safety@venuevibeapp.com

Legal & Law Enforcement

legal@venuevibeapp.com

By using VenueVibe App, you acknowledge that you have read and understood this Data Retention & Deletion Policy.