Data Retention and Deletion Policy

Last Updated: April 21, 2026
Effective Date: April 21, 2026

---

1. Our Approach

Stephen Wise Temple ("Organization") retains your data only as long as necessary, deletes it when asked (subject to legal requirements), and uses secure methods for deletion. This Policy governs data collected through Spirit Of Shabbat ("Platform") in compliance with the CCPA/CPRA and applicable law.

Principles

• Minimization — We collect only what is reasonably necessary.
• Purpose limitation — Data is kept only as long as its original purpose requires.
• Secure deletion — Deleted data cannot be recovered or reconstructed.

---

2. Retention Schedule

Data may be retained longer if required by law, subject to legal hold, needed for ongoing proceedings, or with your consent. Data may be deleted sooner if you request it, the purpose has expired, or law requires it.

---

3. Your Right to Delete

California Consumer Rights

Under CCPA/CPRA, California residents may request deletion of their personal information, subject to legal exceptions.

How to Request

• In-App: Settings > Privacy > Delete My Data
• Email: privacy@spiritofshabbat.org — include your full name and account email
• Mail: Stephen Wise Temple, Attn: Privacy Officer, 15500 Stephen S Wise Dr., Los Angeles, California 90067

You may designate an authorized agent with written authorization and proof of identity.

Verification

We verify your identity before processing deletion requests through account confirmation, email verification, or additional steps for sensitive requests.

---

4. What Happens When You Delete

We acknowledge deletion requests within 10 days and complete deletion within 45 days (extendable to 90 days with notice). Confirmation is sent to your email on file.

---

5. Exceptions

Under CCPA/CPRA, we may retain data when necessary to:

• Complete a transaction or fulfill service terms
• Detect or protect against fraud, security incidents, or illegal activity
• Debug and repair errors
• Exercise free speech rights
• Comply with legal obligations or legal process
• Support public interest research (subject to ethics and privacy laws)
• Make lawful internal uses compatible with the context of collection

We cannot delete aggregated or anonymized data (it is no longer linked to you), contributions woven into community discussions (we anonymize where possible), or data shared with third parties (contact them directly).

---

6. Inactive and Deceased User Accounts

Accounts with no login or activity for 24 consecutive months may be subject to data minimization and eventual deletion. We send reminders at 18 months and a final notice before deletion. Log in at any time to reactivate.

Deceased Users. Verified immediate family members or estate representatives may request account deletion or memorialization by contacting privacy@spiritofshabbat.org with proof of death and proof of authority. We comply within 45 days of verification.

---

7. Data Security

While retained: encryption at rest and in transit, access controls, regular security assessments, and employee training. When deleted: secure deletion with verification for production data, expiration through backup rotation for backups, and secure shredding for any paper records.

---

8. Changes

We may update this Policy. Material changes will be communicated through the Platform or by email. Continued use constitutes acceptance.

---

9. Contact

Stephen Wise Temple
Attn: Privacy Officer
15500 Stephen S Wise Dr., Los Angeles, California 90067
Email: privacy@spiritofshabbat.org
Phone: (310) 476-8561
CCPA/CPRA Requests: https://spiritofshabbat.org/privacy-request

---

This document should be reviewed by a qualified attorney licensed in California before implementation.