Data Retention Policy
14 November 2026
How long ToucanLeads keeps each type of data, and how it is deleted.
1. Your account
Email address, hashed password, language and credit balance: kept while your account is open. When you delete your account in the dashboard, these are deleted immediately; backups roll over within 30 days.
2. Download history
We keep the list of businesses in each of your downloads so you can download it again for free. It is deleted together with your account.
3. Sign-in data
Login sessions expire after 60 days. Password reset links expire after 1 hour and work only once.
4. Payments
Order records (amount, date, credits) are kept as long as tax and accounting laws require, usually up to 7 years. Card details are held only by Lemon Squeezy, never by us.
5. Emails we send
Transactional emails (welcome, password reset) are sent through Resend, which keeps delivery logs for a limited period under its own policy.
6. Technical logs
Our hosting provider keeps short-term server logs for security and debugging, typically for up to 30 days.
7. Business listings
Listing data is refreshed from the Overture Maps open dataset about once a month and business websites are re-checked about every 90 days.
When a business owner removes a listing at toucanleads.com/remove, the record is deleted immediately. We keep only the removed domain or email address on a suppression list so the listing is not added again.
8. Questions
Write to support@toucanleads.com.