Data Retention and Deletion
Effective date: October 16, 2026
We keep personal and financial information only as long as needed to provide our services or as required by law, then securely destroy it.
Retention Schedule
| Record type | How long we keep it |
|---|---|
| Bank data connected through Plaid | While your connection and engagement are active; deleted within 30 days after you disconnect, withdraw consent or the engagement ends |
| Source documents you provide | Until your work is complete; no longer than 2 years after last use |
| Tax returns and workpapers | 7 years after filing |
| Signed e-file authorizations (Forms 8879/8878) | 3 years after filing |
| Payroll records | 4 years |
| Bookkeeping and accounting workpapers | 7 years |
| Engagement letters and consents | 7 years after the engagement ends |
| Backups | Deleted data ages out within 90 days |
Longer periods apply only when required by law, a legal hold or your written request.
Requesting Deletion
Email tscott@tescottcpa.com or write to us at 145 E. University Blvd., Tucson, AZ 85705. We verify your identity, disconnect any Plaid bank connections, and delete your data within 30 days. If the law requires us to keep certain records, we will tell you what we kept and why, restrict its use, and delete it when the required period ends. You can also disconnect bank accounts directly at my.plaid.com.
Secure Disposal
Electronic data is deleted from applications and storage, and devices are securely wiped or destroyed before disposal. Paper records are cross-cut shredded or destroyed by a certified shredding vendor. Our service providers must delete or return our data when their service ends.
Policy Review
This policy is reviewed at least annually and whenever laws or our services change.