Data Retention Policy

1. Overview

MCC Operation Systems Inc. retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. This Data Retention Policy outlines our retention practices for different categories of data processed through the MCC Systems OS platform.

2. Retention Schedule

3. Data Export

Account administrators can export their organization's data at any time through the platform's built-in export tools. Exportable data includes customers, work orders, invoices, employees, inventory, and financial records in standard formats (CSV, PDF). We recommend performing regular exports as part of your data management practices.

4. Data Deletion

Data deletion can be requested through the following methods:

• Self-Service: Administrators can delete individual records (customers, work orders, etc.) directly through the platform
• Account Termination: Upon subscription cancellation, all data is retained for 30 days for export, then permanently deleted
• Data Subject Request: Individuals may request deletion of their personal data by contacting privacy@mccsys.ca
• Right to Erasure: Where no legal retention obligation exists, we will delete personal data within 30 days of a verified request

5. Backup & Recovery

Deleted data may persist in encrypted backups for up to 90 days before being permanently purged. Backups are encrypted at rest and are only accessed for disaster recovery purposes. Data in backups is not used for any other purpose and is subject to the same security controls as production data.

6. Legal Holds

In the event of litigation, regulatory investigation, or legal hold, we may be required to retain data beyond the standard retention periods outlined above. We will notify affected parties to the extent permitted by law.

7. Contact