Data Retention Policy
Last updated: October 6, 2026
1. Purpose & Scope
This policy states how long Glide, operated by Montauk Analytics Inc., keeps customer data, and what happens when retention ends. Glide is a banking product with BSA/AML record-keeping obligations: the records below are kept for 7 years after the customer relationship ends (account closure), then deleted or irreversibly anonymised.
2. Retention Schedule
The relationship ends when your account is closed. Every category below runs from that date, unless a legal hold applies (section 3).
| Data Category | Retention Period | Basis |
|---|---|---|
| Customer identity, KYC and KYB records | 7 years after account closure | BSA/AML identification records |
| Transaction records | 7 years after account closure | BSA funds-transfer record-keeping |
| Account statements | 7 years after account closure | BSA record-keeping |
| Communications with the customer | 7 years after account closure | Dispute and exam readiness |
| Audit records | 7 years after account closure | BSA compliance program records |
| Abandoned KYC drafts (never submitted) | Deleted after 30 days of inactivity | Data minimisation |
3. Legal Holds & Deletion Requests
Records under a legal hold, investigation, or court order are kept until the hold is released, even past 7 years. This compliance retention overrides deletion rights under laws such as the CCPA and GDPR for the records it covers.
Deletion requests are honoured except where the law requires retention. Inside the 7-year window the record stays on file; access requests redact display fields only. Email privacy@glide.co to request deletion: we reply within 30 days with what was deleted and what the law requires us to keep.
4. How We Protect Data
Data is encrypted in transit (TLS) and at rest on our infrastructure. Sensitive identity fields are additionally protected with a KMS-backed envelope where configured. This is not end-to-end encryption: Glide systems and the processors in section 5 can access the data needed to operate your account.
ID images and selfies submitted for verification are kept under the identity schedule above. They are not deleted at submission time.
5. Vendors
We share personal data only with the service providers needed to operate your account, and when required by law: authentication and wallets (Privy), identity verification (Noah, Bridge, Sumsub), banking rails (Column, Bridge), and sanctions screening (Chainalysis, wallet addresses only). Each retains data under its own legal obligations, which can extend past your account closure.
6. Destruction
When retention ends and no hold applies, an automated sweep deletes eligible records and logs counts and record ids (never record contents) for audit. Backups are overwritten on rotation, so a deleted record can persist in backups until the rotation completes.
7. Review & Contact
We review this policy at least annually and after material regulatory or product changes, and notify material changes by email. Questions: privacy@glide.co.