Data Retention Policy

Version 1.0 · How long Techneek Global Ltd retains service data for the InvoiceNow middleware on behalf of clients.

1. Principle

We retain service records for as long as needed to operate the service, meet legal and tax record-keeping obligations, resolve disputes and enforce agreements — then delete or anonymise them.

2. Retention periods

Data category	Retention period	Basis
Transmission records & delivery receipts (invoice content, Peppol references)	5 years	IRAS record-keeping expectations; statutory audit
Administration & audit logs (dispatch, credential and governance events)	5 years	Security & statutory audit
Portal accounts & encrypted credentials	While active + 12 months	Service operation & security
Durable outbox entries (undelivered documents)	Until delivered, then 5 years as part of the transmission record	Delivery guarantee & audit
Security logs (IP / rate-limit metadata)	Up to 90 days	Security monitoring

3. Backups

Encrypted offsite backups are taken regularly and retained on a rolling schedule. Backups are used only for disaster recovery and are subject to the same retention limits.

4. Deletion

When a retention period ends, data is deleted from the active system and will age out of backups on the rolling schedule. Where a legal hold applies, the affected records are retained until the hold is lifted.

5. Client requests

On termination of service, a client may request export of its transmission records. Records subject to statutory retention will be retained for the remainder of the 5-year period and then deleted.

6. Contact

Questions about retention: support@techneekglobal.com. See also our Privacy & PDPA Notice and Data Processing Agreement.