Data Retention Policy
How long PathPort keeps your data.
PathPort retains data for the shortest period consistent with its purpose and Singapore's statutory requirements. This schedule shows every data category, retention period, and the legal basis.
Singapore law requires specific data to be retained for defined periods — particularly financial records (7 years under IRAS requirements) and records supporting immigration applications. PathPort cannot delete this data earlier on request, even where a student requests full account deletion. We will always be transparent about which data must be retained and why.
| Category | Data included | Retention period | Legal basis |
|---|---|---|---|
| Account profile | Name, email, phone, nationality, date of birth | Duration of account + 1 year after closure | Service delivery |
| Application records | Application forms, status history, timeline events | 7 years from application date | Singapore statutory requirement |
| Offer letters | College-issued offer letter PDFs | 7 years from issue date | Singapore statutory requirement |
| IPA / Student Pass documents | ICA-issued IPA PDFs, submission records | 7 years from issue date | Immigration & Checkpoints Authority records |
| Invoices and payment records | Invoice amounts, payment proofs, receipts | 7 years from transaction date | IRAS (Inland Revenue Authority of Singapore) requirement |
| Uploaded documents | Passport copies, transcripts, bank statements | 7 years from last application | Statutory and admissions compliance |
| Audit logs | Admin actions, document access, status changes | 3 years | Internal governance |
| Technical server logs | IP addresses, request logs, error logs | 90 days | Security and fraud prevention |
| Authentication sessions | Session tokens, login events | Session duration (browser close) or 30 days (remember me) | Security |
| Cookie consent records | Timestamp and category selections for consent | 3 years | PDPA compliance evidence |
| Marketing preferences | Email marketing opt-in/out status | Until withdrawn, then deleted within 30 days | PDPA consent |
| Deleted account data | Data associated with a closed account | Statutory minimums above apply; personal profile erased within 30 days of account closure request | PDPA and statutory requirements |
Requesting deletion
You may request deletion of your PathPort account and associated data at any time by emailing pathportsg@gmail.com with the subject "Account deletion request". PathPort will delete your personal profile within 30 days. Data subject to statutory retention (7-year records) will be retained in de-identified form where technically possible, or retained in full where de-identification is not technically feasible.