Data Deletion Policy

1. Overview

TRIVARTHA CRM ("Trivartha CRM", "the App", "we", "us", "our") is committed to giving you full control over your personal data. This Data Deletion Policy explains what data we delete, how you can request deletion, what may be retained (and why), and how long each step takes.

This policy applies to all TRIVARTHA CRM surfaces — the Android mobile app, the iOS app (when available), the web app, and any associated cloud services such as Firebase, Google Sign-In, and our payment processor.

We comply with the EU General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, the Digital Personal Data Protection Act 2023 (India), the California Consumer Privacy Act (CCPA/CPRA), and Google Play's User Data Policy.

2. Scope

This policy covers deletion of:

• Your TRIVARTHA user account and authentication credentials.
• All on-device CRM data — leads, customers, deals, notes, documents, photos, signatures, location logs.
• All cloud-synced data in Firebase Authentication, Firestore, and Cloud Storage.
• Linked third-party identities (Google Sign-In, Apple ID) — we revoke our access tokens.
• Subscription and billing records held by us (financial records retained per Section 6).
• Analytics, crash reports, and support tickets associated with your account.

3. Data We Collect

Before you delete, you may want to know exactly what we hold. The table below lists every category of data, where it lives, and what happens to it on deletion.

4. How to Request Deletion

You can request deletion through any of the following channels. We honour all of them at no cost.

4.1 From inside the App (fastest)

Open Settings → Privacy & Data → Delete my account. See Section 5 for the full walkthrough.

4.2 By email

Send a deletion request from the email address linked to your account to support@trivartha.com with subject line Data Deletion Request.

4.3 Via web form

Fill in the form at the bottom of this page: request form.

4.4 By post

See the postal address in Section 15. Requests received by post may take 3–5 additional business days to process.

4.5 Through Google (Android only)

If you signed in with Google, you may also revoke TRIVARTHA CRM's access at myaccount.google.com/permissions. This stops future access but does not delete data already stored — you still need to send us a deletion request to complete the process.

5. In-App Self-Deletion (Step-by-Step)

The fastest way to delete everything is from inside the app. The flow takes about 60 seconds.

1. Open the App Tap the TRIVARTHA CRM icon on your Android device and unlock it with your PIN or biometrics.
2. Go to Settings Tap the gear icon (⚙️) in the top-right corner of the Home screen.
3. Open Privacy & Data Scroll down and tap Privacy & Data under the Account section.
4. Tap "Delete my account" This is the last option in the screen, shown in red. Tap it.
5. Choose what to delete Select one of three options:
   • Delete account and all data — recommended. Removes everything including cloud sync.
   • Delete cloud data only — keeps the on-device data, removes server copy.
   • Delete account only — removes login but keeps records (for re-activation later).
6. Confirm identity Re-enter your PIN or use biometrics to confirm. We do this to prevent accidental or malicious deletion.
7. Review the summary A final screen lists exactly what will be deleted and what we must retain by law. Tap I understand, continue.
8. Wait for confirmation You will see a progress screen and receive an email within 72 hours confirming completion. Until then, you can tap Undo to cancel.

6. What Gets Deleted vs Retained

6.1 Deleted immediately

• Profile, contact info, and authentication credentials.
• All CRM records: leads, customers, deals, tasks, notes.
• All uploaded documents, photos, signatures, and KYC files.
• Location logs and visit history.
• Cloud sync data (Firestore & Cloud Storage objects).
• Active sessions, refresh tokens, and device authorizations.
• Linked third-party identity grants (Google, Apple).
• Subscription linkage to your account (so you stop being billed).
• Support tickets and chat history (after 90 days).

6.2 Retained for legal / legitimate reasons

Some data we must keep even after account deletion. We keep the minimum necessary, isolate it from your profile, and delete it when the legal clock expires.

7. Deletion Timeline

We commit to the following Service Level Objectives (SLOs) from the moment your request is verified.

8. Third-Party Data Deletion

When you use TRIVARTHA CRM, data is also processed by trusted sub-processors. On deletion, we instruct each of them to delete the relevant data.

9. Identity Verification

To prevent unauthorized deletion, we verify the requester is the legitimate account holder. We use the least-intrusive method that works.

• In-app: PIN or biometric — already verified by device.
• Email request: we only act on requests sent from the email address on file. If you no longer have access, see "Lost email" below.
• Web form: we send a signed magic link to your registered email.
• Post: we may ask for a government-issued ID copy, redacted to show only name and photo.

Lost email or 2FA device (account recovery path)

If you can no longer access the registered email or second factor, send the deletion request from any email and include:

1. Your full name and registered phone number.
2. Last 4 characters of your employee ID (if applicable).
3. Approximate date of registration.
4. Government ID (Aadhaar / PAN / Passport) — we will accept a redacted copy.

Verification takes 3–5 business days in this case.

10. Confirmation & Proof of Deletion

When deletion is complete, we email a Deletion Certificate containing:

• Your account identifier (UID, redacted).
• Timestamp of completion (UTC).
• List of data categories deleted.
• List of data categories retained and the legal basis.
• Contact details for follow-up questions.

You can request a PDF copy of this certificate at any time within 2 years of deletion by writing to support@trivartha.com.

11. Recovery & Reactivation

To restore:

• Open the app and sign in with the same account within 14 days.
• Tap the Restore my account banner that appears.
• Confirm with PIN/biometrics.

After the 14-day grace window, signed-in state is fully wiped. You can always create a new account, but the old CRM data and documents will not be linked to it.

12. Your Rights

Regardless of which deletion path you choose, you retain the following rights under GDPR, DPDP Act, and CCPA:

• Right of access — ask what we hold about you.
• Right of rectification — correct inaccurate data.
• Right to erasure — request deletion (this policy).
• Right to restrict processing — pause data use without deletion.
• Right to data portability — receive a machine-readable export.
• Right to object — to legitimate-interest processing.
• Right to lodge a complaint — with your supervisory authority.

We respond to all valid requests within 30 calendar days at no cost.

13. Frequently Asked Questions

14. Changes to This Policy

We may update this Data Deletion Policy from time to time. When we do, we will:

• Revise the Last updated date at the top of this page.
• Notify you in-app and via email at least 14 days before material changes take effect.
• Maintain an archive of previous versions at /legal/data-deletion-archive.html.

15. Contact

For any questions, complaints, or requests related to this policy, please contact:

16. Request Data Deletion

To request deletion of your TRIVARTHA CRM account and data, please send us an email at support@trivartha.com from the email address registered with your account. Use the subject line Data Deletion Request.

16.1 Please include the following in your email

1. Send from your registered email address We only act on requests sent from the email on file with your TRIVARTHA CRM account. This protects you from unauthorized deletion.
2. Provide your full name and phone number Helps us locate your account quickly and reach you if we have verification questions.
3. State what you want deleted Choose one:
   • Delete account and all data — recommended. Removes everything including cloud sync.
   • Delete cloud data only — keeps on-device data, removes server copy.
   • Delete account only — removes login but keeps records (for re-activation later).
   • Delete specific records only — describe which leads, customers, or documents.
4. Optional: explain your reason Helps us improve the product. Not required.