Data Retention & Deletion

1. Overview

xAutomatic("we," "us," or "our") is committed to respecting your right to control your personal data. This page specifically explains our data retention practices and the steps you can take to request deletion of your personal data, including data obtained through Facebook / Meta Login.

This page supplements our full Privacy Policy. By using our Service, you agree to the data practices described here.

2. Data We Collect via Facebook / Meta Login

When you choose to sign in or connect your account using Facebook Login, we may receive the following information from Meta Platforms, Inc., solely based on the permissions you grant:

• Name: Your first and last name as registered on Facebook.
• Email Address: The email address associated with your Facebook account.
• Profile Picture: Your public Facebook profile picture URL.
• Facebook User ID: A unique identifier provided by Meta to link your account.

We do not collect your Facebook friends list, posts, messages, or any other data beyond what is explicitly listed above. We do not sell or share this data with third parties for advertising purposes.

3. Retention Periods

We retain your personal information only for as long as necessary to fulfill the purposes it was collected for, including legal and business obligations:

• Account Information (name, email, profile picture, Facebook User ID): Retained for as long as your account is active. Upon account deletion, this data is removed within 30 days.
• Transaction Records: Retained for 8 years to comply with applicable tax and financial regulations in India.
• Customer Service Communications: Retained for 2 years from the date of the interaction.
• Usage & Analytics Data: Retained for up to 26 months, after which it is aggregated or permanently de-identified.
• Backup Copies: May persist in encrypted backup systems for up to 60 additional days after a deletion request is fulfilled.

4. Data Storage

Your data is stored and processed primarily in India, and may also reside on servers operated by our infrastructure providers in the United States and Europe. All cross-border data transfers are protected by appropriate contractual safeguards and security measures.

We use industry-standard encryption (TLS in transit, AES-256 at rest), access controls, and regular security audits to protect your stored data.

5. How to Request Data Deletion

You have the right to request deletion of your account and all associated personal data at any time. We provide the following methods:

5.1 Email Request

Send an email to hi@akshayrx.com with the subject line "Data Deletion Request". Please include the email address or Facebook User ID associated with your account to help us locate and delete your data promptly.

5.2 Via Facebook Settings

You may also revoke xAutomatic's access to your Facebook data directly from your Facebook account under Settings > Apps and Websites. Revoking access removes our ability to retrieve new data from Meta, but does not automatically delete data already stored in our systems. To request full deletion of stored data, please also use one of the methods above.

6. Deletion Process & Timeline

Upon receiving a valid deletion request, we will:

• Acknowledge your request within 72 hours via the email address on file.
• Delete or permanently de-identify all your personal data within 30 days of the confirmed request.
• This includes your profile information, Facebook-linked data, transaction records, usage history, and communications.
• Send you a written confirmation once deletion is complete, or notify you of any data that must be legally retained and the reason for retention.
• Purge encrypted backup copies within an additional 60 days.

Please note: Once your account is deleted, this action is permanent and cannot be undone. You will lose access to all services, purchase history, and data associated with your account.

7. Data Retained After Deletion

Even after a deletion request, we may be required to retain certain limited information for the following legitimate legal and business purposes:

• Tax & Financial Compliance: Transaction records as required under Indian tax laws (up to 8 years).
• Fraud Prevention: Records necessary to prevent fraudulent activity or abuse.
• Legal Disputes: Information relevant to ongoing or potential legal proceedings.
• Regulatory Obligations: Any data retention required by applicable law or regulation.

Any data retained for these purposes is kept strictly isolated, is not used for any commercial purpose, and is deleted as soon as the retention obligation expires.

8. Contact Us

For any questions, concerns, or to submit a data deletion request, please reach out to our Privacy Team: