Data Retention Policy

BSO Data Retention Policy

Last Updated: March 4, 2026

1. Purpose

This policy defines how long Bachata Sensual Orlando LLC (“BSO”) retains financial data collected through the BSO Financial Analyst application and under what circumstances data is deleted.

2. Retention Periods

Data Type	Retention Period	Reason
Transaction records	7 years	IRS record-keeping requirement for business tax returns
P&L reports (generated)	7 years	Tax documentation requirement
Vendor categorization rules	Duration of app use	Operational — improves categorization accuracy
Plaid access tokens	Duration of bank connection	Required for ongoing transaction sync
AI categorization logs	1 year	Audit trail for categorization decisions
Scheduler run history	1 year	Operational monitoring

3. Data Deletion

The business owner can delete data at any time through the following methods:

• Full data reset: Delete the SQLite database file and restart the application
• Disconnect bank accounts: Revoke Plaid access tokens via the Plaid dashboard, preventing further data collection
• Application removal: Remove the Docker container and associated data volume

4. Data After Account Disconnection

When a bank account is disconnected from Plaid:

• No new transactions are synced
• Previously synced transactions remain in the database for the retention period defined above
• The encrypted Plaid access token is retained but becomes non-functional

5. Compliance

This retention schedule aligns with:

• IRS Publication 583: Business tax records must be kept for at least 3 years from the date of filing, or 7 years if a loss deduction is claimed
• Florida business record-keeping requirements

6. Policy Review

This policy is reviewed annually and updated as retention requirements change.

7. Contact

For questions about data retention: info@bsolatindance.com