Data Deletion Policy
How Rizzerv handles the deletion of personal data
Version 1.0 | Effective Date: April 2026 | Rizzerv Technologies Private Limited
1. Overview
This policy describes how Rizzerv Technologies Private Limited ("Rizzerv") handles the deletion of personal data collected through the Rizzerv beauty booking app and salon dashboard. It applies to all users — customers, salon/service providers, and staff.
We comply with applicable laws including the Digital Personal Data Protection Act, 2023 (DPDP Act), IT Rules 2011, and Google Play / Apple App Store data deletion requirements.
2. Data Retention Periods
We only keep your data for as long as necessary:
| Data Type | How Long We Keep It |
|---|---|
| Account & Profile (name, email, phone) | While account is active + 90 days after closure |
| Booking History | 3 years (for disputes and legal purposes) |
| Payment Transaction Records | 5 years (required by law — PMLA 2002) |
| Location Data (GPS) | Session only — never stored on our servers |
| Analytics Data | 13 months (anonymised after that) |
| Support Tickets | 2 years from last interaction |
| Marketing Preferences | Until account closure or opt-out |
Note: Rizzerv never stores card numbers, CVVs, or bank details. Payments are processed by PCI-DSS compliant third-party providers. We only retain non-sensitive transaction metadata.
3. Your Right to Delete Your Data
You can request deletion of your personal data at any time. You may ask us to:
- › Delete your entire account and all associated data
- › Delete specific data while keeping your account
- › Withdraw consent for data processing
- › Confirm that deletion has been completed
How to Submit a Deletion Request
In-App (Recommended)
Settings → Privacy → Delete My Account or Request Data Deletion
hello@rizzerv.com — Subject: "Data Deletion Request"
We will verify your identity before processing any deletion to protect your account from unauthorised requests.
4. Deletion Timelines
| Step | Timeline |
|---|---|
| Acknowledgement of your request | Within 3 business days |
| Identity verification | Within 5 business days of acknowledgement |
| Deletion from active systems | Within 30 days of verified request |
| Deletion from backups | Within 90 days of verified request |
| Confirmation sent to you | Within 3 business days of completion |
| Third-party deletion instructions issued | Within 30 days of verified request |
5. When We Must Retain Data
In some cases, we are legally required to keep certain data even after a deletion request. We will tell you exactly what is retained and why.
| Data Type | Reason | How Long |
|---|---|---|
| Payment records | Anti-money laundering law (PMLA 2002) | 5 years |
| Dispute-related bookings | Pending legal proceedings | Until resolved + 1 year |
| Tax & invoice records | GST / Income Tax Act | 7 years |
| Fraud signals | Security and fraud prevention | Anonymised after 12 months |
Any retained data is isolated from active systems and is not used for marketing or profiling.
6. Automatic Data Deletion
We also delete data automatically on a schedule:
- › Inactive accounts: After 24 months of inactivity, we notify you and delete the account within 30 days if no action is taken.
- › Session data: Location and session identifiers are deleted immediately when you close the app.
- › Analytics: Identifiable data is purged on a 13-month rolling basis.
- › Marketing profiles: Deleted within 10 business days of opting out.
- › Old booking records: Deleted during quarterly audits after the 3-year retention period.
7. Third-Party Providers
We work with trusted technology partners (cloud hosting, analytics, notifications, payments). All are bound by data processing agreements requiring them to delete your data on our instruction within 30 days.
When you book an appointment, your name and contact are shared with the salon or stylist. Rizzerv will delete this from our systems upon request, but we cannot enforce deletion from the salon's own records.
8. Minors
Rizzerv is intended for users aged 18 and above. If we discover that a minor's data has been collected, we will delete it within 72 hours. Contact hello@rizzerv.com if you believe a minor's data has been collected.
9. If We Can't Delete Your Data
If we cannot fully comply with a deletion request, we will respond in writing within 30 days, explain the reason, and inform you of your right to escalate. You may raise a complaint with the Data Protection Board of India (DPBI) under the DPDP Act, 2023, or with MeitY in the interim.
10. Contact Us
Subject Line
Data Deletion Request / Privacy Query
Response Time
Within 3 business days
Location
India
This policy is effective from April 2026. © 2026 Rizzerv Technologies Private Limited. All rights reserved.
