Data Deletion Policy

Your Right to Erasure

Under the DPDP Act 2023, you have the right to request deletion of your personal data held by Clearflow Digital. This policy explains the different ways you can delete your data and what to expect during the process.

Effective: May 27, 2026 Response: Within 14 days

1. Right to Erasure 2. In-Product Controls 3. Manual Deletion Requests 4. Timelines 5. What We Retain 6. Contact

Self-service Delete via in-app Account settings - immediate

Email request Send to grievance officer - processed within 14 days

Backup purge Backup data erased within 30 days of primary deletion

1. Right to Erasure

As a Data Principal under the DPDP Act 2023, you have the right to request the erasure of your personal data when it is no longer necessary for the purpose for which it was collected, or when you withdraw consent on which the processing is based. Clearflow will fulfil your erasure request without undue delay, subject to legal obligations that may require limited retention.

2. In-Product Controls

For Spendly, you can delete your data directly through the app without contacting us:

Delete cloud backup: Go to Account → Privacy → Delete Cloud Backup to remove your synced metadata from our servers. Your local device data is unaffected.
Delete account: Go to Account → Delete Account to permanently remove your Spendly account and all associated data. This action is immediate and irreversible.
Revoke SMS permission: Go to your device Settings → Apps → Spendly → Permissions to revoke SMS access. This stops future spend signal reading but does not delete previously processed data.

3. Manual Deletion Requests

If you wish to terminate your account and delete all associated personal data from Clearflow's systems, please send a request to support@clearflowdigital.in with the subject "Data Erasure Request (DPDP)".

Please include the following information to help us verify your identity and process your request:

Full name
Registered email address associated with the account
Product name (Spendly or other Clearflow service)
Specific data you want deleted (or "all data")

We may request additional verification before processing your request to ensure we do not disclose or delete data belonging to another user.

4. Timelines

Self-service deletion: Immediate upon confirmation in the app.
Manual email requests: We aim to process all verified deletion requests within 14 business days of receiving a complete request.
Backup data: Data is erased from primary systems on confirmation. Backup archives are purged within 30 days as part of our routine backup rotation cycle.
Acknowledgement: We will acknowledge your deletion request within 48 hours and provide an estimated completion timeline.

5. What We Retain

After processing your deletion request, the following data may be retained for legal and operational reasons:

Transaction records: De-identified analytics data that cannot be linked back to you may be retained for product improvement.
Legal holds: Data required to comply with applicable Indian laws (e.g., tax records, regulatory obligations) will be retained for the period mandated by law and then securely deleted.
Support tickets: If you have contacted support, your ticket history may be retained in de-identified form for quality assurance.

We will inform you if any data cannot be deleted due to legal obligations and explain the applicable retention period.

6. Contact

For questions about this policy or to submit a deletion request:

Grievance Officer: Samar Pratap Singh Sisodia
Email: support@clearflowdigital.in
Subject: "Data Erasure Request (DPDP)"