Data Retention

Retention policy, enforced in code.

Define how long each category of personal data should be kept. Avaril enforces deletion and anonymization automatically when that period ends — no manual purge jobs, no missed deadlines, no relying on someone to remember.

Policy Definition

Set a retention period per data category — KYC documents, transaction logs, marketing leads, support tickets — from one place. No more retention rules scattered across spreadsheets, tribal knowledge, or a single engineer's memory.

Rule Enforcement via Code

Once a policy is defined, Avaril enforces it automatically at the point of expiry — deleting or anonymizing records without a manual purge job, a cron script someone forgot to monitor, or a quarterly "data cleanup" ticket.

retention.policy.ts
import { avaril } from "@avaril/react"
avaril.retention.define({
category: "kyc_documents",
retainFor: "7y",
onExpiry: "anonymize",
});

How it works

01

Define the policy

Pick a data category and set how long it should be retained, and what happens when that period ends — deletion or anonymization.

02

Avaril enforces it

The rule runs in code against your data store on schedule. There's no dependency on someone remembering to run a script.

03

Get an audit trail

Every enforcement action — what was deleted or anonymized, and when — is logged, so you have proof of compliance if a regulator or auditor asks.

Why this matters under DPDPA

Under India's Digital Personal Data Protection Act, 2023, a Data Fiduciary must erase personal data once the purpose it was collected for is no longer being served and retention is not required for a specified legal purpose. Retention rules that live in a spreadsheet, or in one engineer's head, don't hold up as evidence of compliance. Avaril turns your retention policy into an enforced, auditable rule so deletion actually happens on schedule.

Limited Beta Access

Build Privacy Governing Workflows Faster business-ready?

Built for Startups and MSMEs navigating Privacy legal compliance, privacy operations, and consent management at scale.

No spam, ever. We'll only send you product updates.