When you request account deletion, we permanently erase personal data that is no longer necessary for us to provide services. However, under European and German law, we are legally required to retain certain categories of data for specific periods, even after deletion:
- Identification (KYC) Data
• Sumsub retains a copy of your ID documents and verification details.
• Retention: up to 5 years after the end of the customer relationship (as required by Anti-Money Laundering laws).
- Transaction and Payment Records
• Records of your transactions (crypto and fiat), account statements, invoices, and receipts.
• Retention: up to 10 years (as required by tax and commercial law).
- Business Correspondence
• Contracts, emails, and communications relevant for accounting, tax, or legal compliance.
• Retention: 6–10 years, depending on the type of record.
- Litigation / Regulatory Exceptions
• Data may be retained longer if necessary to defend legal claims or comply with ongoing regulatory investigations.