Privacy Policy

This policy describes how ExaRoutes collects, uses, and shares information when you use our service. The current document is a placeholder. The production version will be reviewed by counsel before public launch.

Data retention & backups

Operational backups of the production database are retained for up to 30 days. When you exercise your right to erasure (GDPR Art. 17), your live data is deleted within 30 days of the request. Data within backups is overwritten by the rolling retention window within the same period (and re-applied as a deletion if a backup ever needs to be restored). Audit-log entries that legally must persist (e.g. published GS1 compliance records under FDA UDI / EU FIC) are exempt from deletion per the relevant regulation.