Deletion and erasure

Under DPDP Act 2023 you can ask us to delete your data. The Your consents page has a Delete my data action that:

1. Removes your records from the live database.
2. Triggers a removal job against backups, logs, caches, and analytics.
3. Sends you a deletion certificate by email when the chain is complete (within 30 days).

Some retention is mandated by law (for example, transaction logs that must be retained for the statutory period). We tell you which records are retained and why, and we strip every personal identifier from them.