Companies legally have to keep a ton of information as soon as they process any payment. High chances are your company gets money from its customers so it can keep all kind of information almost indefinitely.

The only notable exception is ad business because "users" are not customers and do not enter any transactions.