Data Retention Policy
Last updated: April 12, 2026
This policy describes how long JennAI (operated by DMTM Inc) retains different categories of data and when that data is deleted. This policy is reviewed annually and updated as needed to remain compliant with applicable law.
Retention periods
| Data type | Retention period | Reason |
|---|---|---|
| Financial transactions (rent charges, payments, GL entries) | 7 years after transaction date | IRS and state tax compliance |
| Lease agreements and tenancy records | 7 years after lease end | Landlord-tenant legal compliance |
| Bank transactions imported via Plaid | 7 years after transaction date | Tax and accounting compliance |
| Plaid access tokens | Deleted immediately on account disconnect | Revoke bank access |
| User account data (name, email, login) | Duration of account + 90 days | Deletion buffer for reactivation |
| Authentication logs and audit trails | 2 years | Security incident investigation |
| Communications (SMS, email, notes) | 7 years after last activity | Dispute resolution and legal evidence |
| Maintenance requests and work orders | 5 years after completion | Warranty and habitability claims |
| Application data (rental applications, screening results) | 2 years after decision | Fair housing compliance |
| Marketing/inquiry data (non-tenants) | 2 years after last contact | Re-engagement and analytics |
Deletion requests
You can request deletion of your personal data at any time by emailing privacy@jennai.us. We will honor deletion requests within 30 days, except where we are required to retain data by law (e.g., financial records for tax compliance).
For bank account disconnections: Plaid access tokens are deleted immediately when you disconnect a bank account. Historical transaction data already imported may be retained for accounting purposes under the 7-year financial retention rule above.
Automatic deletion
Records that exceed their retention period are automatically deleted or anonymized during regular maintenance cycles. Anonymization means removing personally identifiable fields while preserving aggregate statistical data for reporting.
Backups
Database backups are retained for 30 days by our hosting provider (Supabase). Deleted records persist in backups for up to 30 days after deletion, after which they are permanently removed.
Policy review
This policy is reviewed at least annually, and whenever there is a material change in applicable law or our data practices. The most recent review date is shown at the top of this page.
Contact
DMTM Inc
Attn: Privacy
South Bend, IN
Email: privacy@jennai.us