Data Retention & Shredding Policy.

1 Purpose & Overview

This Policy explains how Emto Max Holdings Ltd (Anguilla) limits retention of information in EM : Beyond Reach. The service is designed to retain only what is needed to operate an active account and then to remove that account through an automatic cryptographic shredding process.

The lifecycle applies to accounts on the EM platform at emtome.io. It is separate from any information a user may choose to share outside the service, including with another user or a payment processor.

2 No KYC & Zero PII

EM does not perform KYC and does not require personal identifying information (PII) to activate an account. Registration uses a three-word activation token and a 12-word seed phrase. EM does not keep a copy of your seed phrase or private keys and provides no key escrow.

You are responsible for safeguarding these credentials. If you lose them, EM cannot recover them or use them to restore an account.

3 Account Lifecycle & Retention Stages

• Days 1–335: an active account receives full service access and retains only the account data needed to provide that service.
• Renewal Window, Days 336–365: the account remains active and may be renewed.
• Restricted Mode, Day 366: an unpaid account leaves full access and enters Restricted Mode.
• Cryptographic Shredding, Day 373: the account is automatically and permanently shredded if it has not been renewed.

Once the account reaches Day 373, the deletion process cannot be reversed and the account cannot be restored.

4 Automated Cryptographic Shredding Mechanics

On Day 373, the automated process is designed to remove the account from the service by:

• deleting the account’s database rows;
• destroying the cryptographic keys that protect the account;
• purging associated metadata and account references; and
• maintaining zero backups of the shredded account for later restoration.

Cryptographic shredding makes retained encrypted material unusable by destroying the keys required to read it. It does not delete copies that another user, device, or external service may have created outside EM.

5 Infrastructure & Jurisdictional Safeguards

EM infrastructure is hosted in Anguilla, including the Rock Farm and Blowing Point micro-DCs. The infrastructure is outside the 5/9/14-Eyes surveillance alliances and uses sovereign redundant links. EM does not use third-party cloud providers or US CDNs for the closed-loop platform.

The service uses a closed-loop topology with federation disabled. These safeguards support the retention boundary, but no technical or geographic measure can guarantee protection from every threat, outage, or legal process.