Account Deletion & Data Retention
In compliance with the **Google Play Developer Program Policies** on data safety and the **DPDP Act 2023**, we provide clear mechanisms for customers to request the deletion of their accounts and associated personal data.
1. How to Request Account Deletion
We offer both in-app self-service options and web-based request forms:
- **Via the Mobile App:** Go to **Profile -> Delete Account**, type `DELETE` to confirm, and submit your request.
- **Via the Web Application:** Go to the **Account Deletion** page, log in, and click the "Request Account Deletion" button, or fill out the request form.
- **Via Email Support:** Email a request from your registered contact details to **support@rrvillagedosa.com** with the subject "Account Deletion Request".
2. The Deletion & Anonymization Process
To protect financial records and comply with tax regulations, we employ a **Soft-Delete & Anonymize** pipeline:
1. **Submission Queue:** Your request is registered in our secure backend deletion request queue.
2. **Confirmation:** A notification is sent to your registered phone number / email.
3. **Active Order Check:** The request is held if you have active, uncompleted orders. It will resume once orders are delivered or cancelled.
4. **PII Scrubbing:** Upon processing (within 30 days), all Personally Identifiable Information (PII) is permanently scrubbed:
- Your name is changed to "Deleted User".
- Your phone number is replaced with a unique, randomized placeholder (e.g., `deleted_user_123`).
- Your email address and saved delivery addresses are permanently deleted from our active database.
- Active login tokens and push notification IDs are fully cleared.
3. Data We Must Retain
As required by Indian corporate, tax, and consumer protection laws (including GST rules):
- All completed order invoices, transaction amounts, and Razorpay payment references must be kept for **7 years**.
- These records will remain in our database but will be completely disconnected from your identity (fully anonymized) and cannot be tracked back to you.