Legal
Data Retention Policy
Last updated: July 2026
Cossmic keeps personal data only as long as it is needed for the purpose it was collected, or as required by law. This is the single reference for our retention windows.
Retention schedule
| Data type | Retention | Then |
|---|---|---|
| Candidate & applicant data | Up to 2 years, or until consent is withdrawn | Deleted or anonymised |
| Account data | Subscription term + 90 days | Deleted |
| Employee / HR records | the applicable Indian statutory retention period (typically up to 8 years for payroll, PF and tax records) | Erased once the statutory floor lapses |
| Consent records | Retained as a legal record | Kept append-only for accountability |
| Audit logs | Retained for the audit-retention window | Kept append-only, then aged out |
How erasure happens
Candidate and applicant data past its window is deleted or anonymised automatically. Consent and audit records are kept as append-only legal records for accountability and are not aged out by this process. Employers can also delete candidate data at any time from within the platform, and individuals can request erasure — see the Privacy Policy.
Contact
Questions about retention or a deletion request: privacy@cossmic.in.