This document describes the current Millennium service. A client’s signed Order Form supplies its exact scope, contracting parties and any jurisdiction-specific terms.
1. Retention principles
Millennium aims to collect only information needed to provide and protect the service, keep it only for a defined business or legal purpose, and remove or de-identify it when that purpose ends. A signed Order Form or applicable law may require a different period.
2. Default schedule
- Business account, website, catalog, and configuration records: while the account is active, followed by a 60-day recovery period after termination.
- Lead and appointment-request records: 24 months after the most recent activity, unless the client selects a shorter lawful period.
- Ordinary assistant conversation text: processed for the active interaction and not intended for long-term storage; a submitted lead or handoff follows the lead-retention period.
- Security, audit, and abuse-prevention records: generally 12 months, or longer when needed to investigate an active incident.
- Billing, tax, payment, and contract records: up to seven years when reasonably required for accounting, disputes, or law.
- Backups and disaster-recovery copies: removed through the applicable backup cycle and not used for ordinary business operations after deletion.
3. Access, export, correction, and deletion
An authorized client may request an available export, correction, or deletion of its account information. A person who submitted information through a client website may contact that client or Millennium using the verified contact in the applicable website or Order Form. We may verify identity, authority, and business ownership before acting.
After service termination, the client should request any desired export during the 60-day recovery period. At the end of that period, remaining active-service copies may be deleted or de-identified, subject to the exceptions below.
4. Permitted exceptions
- Complete a transaction or provide a service requested before deletion.
- Detect security incidents, prevent fraud or abuse, and preserve evidence.
- Comply with tax, accounting, court, regulatory, or other legal obligations.
- Establish, exercise, or defend legal claims and enforce agreements.
- Maintain data already de-identified or aggregated so it cannot reasonably be linked to a person.
5. Sensitive information
Millennium’s ordinary forms and assistant are not designed for payment-card numbers, passwords, government identifiers, health records, or other highly sensitive information. Users are instructed not to submit such information. If discovered, it may be restricted or deleted unless preservation is legally required.
6. Implementation note
These periods are Millennium’s operating defaults. Provider settings, backup cycles, support procedures, and deletion tools must be configured to support them. If a provider requires a materially different cycle, the published policy will be updated before that provider is activated.