Account Deletion & Data Retention

In compliance with the **Google Play Developer Program Policies** on data safety and the **DPDP Act 2023**, we provide clear mechanisms for customers to request the deletion of their accounts and associated personal data.

1. How to Request Account Deletion

We offer both in-app self-service options and web-based request forms:

• **Via the Mobile App:** Go to **Profile -> Delete Account**, type `DELETE` to confirm, and submit your request.
• **Via the Web:** Visit this Account Deletion page and submit a deletion request using the request form below. You do not need to sign in to the web application.
• **Via Email Support:** Email a request from your registered contact details to **apps@rrvillagedosa.com** with the subject "Account Deletion Request".

2. The Deletion & Anonymization Process

To protect financial records and comply with tax regulations, we employ a **Soft-Delete & Anonymize** pipeline:

1. **Submission Queue:** Your request is registered in our secure backend deletion request queue.

2. **Confirmation:** A notification is sent to your registered phone number / email.

3. **Active Order Check:** The request is held if you have active, uncompleted orders. It will resume once orders are delivered or cancelled.

4. **PII Scrubbing:** Upon processing (within 30 days), all Personally Identifiable Information (PII) is permanently scrubbed:

• Your name is changed to "Deleted User".
• Your phone number is replaced with a unique, randomized placeholder (e.g., `deleted_user_123`).
• Your email address and saved delivery addresses are permanently deleted from our active database.
• Active login tokens and push notification IDs are fully cleared.

3. Data We Must Retain

As required by Indian corporate, tax, and consumer protection laws (including GST rules):

• All completed order invoices, transaction amounts, and Razorpay payment references must be kept for **7 years**.
• These records will remain in our database but will be completely disconnected from your identity (fully anonymized) and cannot be tracked back to you.