Data Deletion Policy

At Argentron Technologies, we respect your right to control your personal data. This Data Deletion Policy explains how you can request the deletion of your data from the SigmaDSA platform, what data can be deleted, and the process we follow to fulfil your request in compliance with India's Digital Personal Data Protection Act, 2023 (DPDPA).

1. Your Right to Deletion

Under the DPDPA, you have the right to request the erasure of your personal data held by us when:

• The data is no longer necessary for the purpose for which it was collected
• You withdraw your consent for data processing, and there is no other legal basis for continued processing
• The data has been processed unlawfully
• You choose to close your SigmaDSA account

As the data principal, you may exercise this right at any time by following the process outlined below.

2. What Data Can Be Deleted

Upon a valid deletion request, we can delete the following categories of data:

• Personal profile information: Name, email address, phone number, and other account details
• Business data: Loan files, lead records, borrower information, documents, notes, and communication history uploaded or created on the platform
• Usage data: Activity logs, session data, and feature usage history
• Team member data: Information about users added to your organisation's account
• Cookies and tracking data: Browser-stored identifiers and analytics data linked to your account

3. How to Request Deletion

To request deletion of your data, send an email to privacy@sigmadsa.com with the following information:

1. Subject line: "Data Deletion Request"
2. Your full name as registered on SigmaDSA
3. Email address associated with your account
4. Organisation name (if applicable)
5. Scope of deletion: Specify whether you want complete account deletion or deletion of specific data categories
6. Reason for request (optional, helps us improve our service)

Alternatively, account administrators can initiate a deletion request from the account settings within the SigmaDSA platform, when this feature is available.

4. Deletion Process and Timeline

Once we receive your deletion request, we follow this process:

1. Acknowledgement (within 48 hours): We will confirm receipt of your request and may ask clarifying questions if needed
2. Identity verification (1-3 business days): We will verify your identity to prevent unauthorised deletion requests (see Section 6)
3. Data export opportunity (7 days): Before deletion, we will offer you the option to export your data. You will have 7 days to download the export
4. Deletion execution (within 30 days of request): We will permanently delete the requested data from our active systems
5. Backup purge (up to 60 days): Data in encrypted backups will be purged during the next scheduled backup rotation cycle, which may take up to an additional 30 days

You will receive a confirmation email once deletion is complete.

5. Data We Must Retain

Certain data may be retained even after a deletion request, as required by law or legitimate business purposes. This includes:

• Billing and tax records: Invoice data, payment history, and GST records must be retained for a minimum of 7 years under Indian tax regulations
• Legal compliance records: Data required to comply with ongoing legal obligations, regulatory investigations, or court orders
• Fraud prevention data: Information necessary to prevent fraud, enforce our Terms of Service, or protect the rights and safety of our users
• Anonymised and aggregated data: Data that has been anonymised and cannot be linked back to you may be retained for analytics and service improvement

Where retention is required, we will inform you of the specific categories of data being retained and the legal basis for retention.

6. Verification of Identity

To protect against unauthorised deletion requests, we will verify your identity before processing the request. Verification may include:

• Confirming the request from the registered email address associated with your account
• Requesting additional identifying information (e.g., organisation name, account creation date, last login details)
• For organisation accounts, verifying that the request comes from an authorised administrator

If we are unable to verify your identity, we reserve the right to decline the request and will notify you of the reasons.

7. Consequences of Deletion

Please be aware that data deletion is permanent and irreversible. Before submitting a deletion request, consider the following:

• Account access: If you request complete account deletion, you will lose access to SigmaDSA and all associated data
• Active subscription: Deletion of your account will cancel your active subscription. No refunds will be issued for the remaining subscription period
• Team impact: If you are an organisation administrator, deleting the account will affect all team members under your organisation
• Data recovery: Once deletion is complete, we cannot recover your data. We strongly recommend exporting your data before submitting a deletion request
• Third-party data: We are not responsible for data that you have independently shared with third parties outside of the SigmaDSA platform

8. Contact Us

If you have questions about this Data Deletion Policy, your rights under the DPDPA, or need assistance with a deletion request, please contact us:

• Email: privacy@sigmadsa.com
• Company: Argentron Technologies
• Website: sigmadsa.com

For general privacy inquiries, please refer to our Privacy Policy. For questions regarding service terms, see our Terms of Service.