DATA DELETION POLICY

1. INTRODUCTION

This Data Deletion Policy explains how MAHUGNON SERVICES LTD processes, retains and deletes the personal and business data of users of the ShopMahelso application.

It applies to all data collected, including:

• user account data,
• shop data (products, stock, sales, employees, etc.),
• subscription data,
• payment data,
• technical data (tokens, logs, notifications).

2. DATA CONTROLLER

MAHUGNON SERVICES LTD
📍 20 Wenlock Road, London, N1 7GU, United Kingdom
📑 Company number: 16010860
📧 support@shopmahelso.com

3. USER RIGHTS REGARDING DATA DELETION

In accordance with the GDPR, UK GDPR and Google Play rules, the user may request at any time:

• complete deletion of their account,
• deletion of certain specific data,
• deactivation of their profile,
• erasure of data related to a subscription,
• deletion of technical data (tokens, logs, etc.).

Requests are generally processed within a maximum of 30 days.

Contact: support@shopmahelso.com

4. AUTOMATIC DATA DELETION

Some data is automatically deleted depending on its nature:

• Session tokens: upon logout or expiry.
• Notification tokens: when the app is reinstalled or uninstalled.
• Temporary logs: usually purged every 30 to 90 days.
• Expired sessions: automatically managed by Supabase.
• Failed transaction data: generally deleted after about 7 days.

5. MANUAL DELETION ON REQUEST

When a user requests deletion of their data, we proceed to erase the following items (except where legal obligations apply):

• account identity (email address, user identifier),
• associated shop(s),
• products, stock, stock movements, employees,
• sales history,
• subscription information (status within the app),
• tokens and technical access,
• data related to notifications.

Data not deleted immediately for legal or accounting reasons:

• invoices and accounting records: generally up to 6 years (United Kingdom),
• Google Play purchase proof: retained by Google under their policies,
• security logs: retained for up to around 90 days.

6. DELETION FROM WITHIN THE APPLICATION

ShopMahelso allows the user (depending on the available features) to:

• delete their account,
• delete a shop,
• delete products or stock data,
• delete certain synchronised data.

In case of full account deletion:

• all data linked to the account is permanently erased (except where legal obligations apply),
• access to shops, reports and subscriptions is revoked,
• data becomes irretrievable.

7. DELETION VIA EMAIL

The user may also request deletion of their data by email.

Example:

Subject: Request for data deletion
To: support@shopmahelso.com

MAHUGNON SERVICES LTD will proceed with deletion of the relevant data within a maximum of 30 days, except where specific legal constraints apply.

8. DELETION IN CASE OF INACTIVITY

By default:

• accounts that have been inactive for an extended period (e.g. 24 months) may be deleted or anonymised,
• where possible, the user is notified about 30 days before deletion.

9. DATA DELETION AFTER SUBSCRIPTION TERMINATION

Google Play:

• Deletion, within the app, of subscription data that is no longer needed (Premium status).
• Some information (purchase proof, history) is kept by Google under their own rules.

FedaPay:

• Transaction data may be retained for up to 5 years depending on local laws and provider requirements.
• Subscription data within the app (e.g. Premium status) is deleted or disabled once the subscription is terminated.

10. DEFINITIVE AND IRREVERSIBLE DELETION

Once data has been deleted:

• restoration is impossible,
• data is removed from active Supabase databases,
• residual data is removed from backups during subsequent scheduled purges,
• Firebase tokens and some links with Google Play are revoked or automatically expire.

11. CONTACT

To exercise your rights or ask any question about data deletion:

📧 support@shopmahelso.com
🏢 MAHUGNON SERVICES LTD
📍 20 Wenlock Road, London, N1 7GU, United Kingdom