Data Retention and Deletion Policy

1. Principles

Information is retained only while necessary for the stated purpose, customer instructions, contract, security, dispute resolution and applicable labor, tax, corporate or privacy obligations.

2. Customer-controlled data

During the service, customers manage records through available product functions and instructions. Retention may vary by module and by the customer’s own legal obligations.

3. End of service

Export, limited-access and deletion periods are governed by the signed agreement and DPA. Customers should complete exports before the agreed window closes.

4. Backups and technical records

Deletion from active systems may not immediately remove data from protected backups or technical logs. Residual copies remain restricted and expire through the applicable lifecycle.

5. Legal holds and exceptions

Deletion may be delayed where retention is required by law, an authority request, a dispute, fraud prevention or the establishment, exercise or defense of claims.

6. Current limitation and requests

AlloraHR does not publish one period for every category because scope and obligations differ. Contractual periods control when specified. Questions and requests may be sent to privacidad@allorahr.com. Commercial and billing questions may be sent to hola@allorahr.com.

Company information