User Data Deletion Policy
Your right to request deletion of personal data processed by GateFlux, and how we handle each request.
This Policy is aligned with the Digital Personal Data Protection Act, 2023 (India), applicable Draft Rules (2025), and the GDPR (where applicable). It governs requests for deletion of personal data processed by GateFlux Pvt. Ltd. through the GateFlux Platform.
72 Hours
Acknowledgement of deletion request
30 Days
Processing from identity verification
3 Years
Inactive account auto-deletion threshold
1.Scope
This Policy applies to all Platform users, including:
- Residents, Owners, and Tenants
- Committee members and Society administrators
Societies act as Data Controllers. GateFlux Pvt. Ltd. acts as Data Processor (or Controller where applicable).
2.Right to Deletion
Individuals may request deletion of their Personal Data where:
- Consent has been withdrawn
- Data is no longer necessary for the original purpose
- Processing was unlawful
- The legal retention period has expired
Deletion requests must be submitted to privacy@gateflux.co or through the designated in-app interface (if available).
3.Deletion Timelines
3.1 Acknowledgement
Deletion requests shall be acknowledged within 72 hours of receipt. Acknowledgement will confirm:
- Receipt of your request
- Identity verification requirement and method
- Estimated processing timeline
3.2 Processing Timeline
Deletion requests shall be processed within 30 days from successful identity verification. Where legally permissible, deletion may occur earlier. If additional time is required due to complexity, you will be informed with justification.
4.Inactive Account Deletion
In accordance with DPDP Draft Rules (2025):
- Inactive user profiles may be automatically deleted after 3 years of inactivity
- Unless renewed consent or a legal retention requirement applies
"Inactive" means no login activity and no active society membership during the 3-year period.
Society-level accounts are excluded from automatic deletion while their subscription remains active.
5.Step-by-Step Deletion Process
Request Submission
Submit your deletion request via email to privacy@gateflux.co or through the designated in-app interface. Include your registered email and a brief description of the data you wish to have deleted.
Identity Verification
We verify your identity through one of the following:
- Registered email confirmation
- OTP validation to your registered mobile number
- Administrator confirmation (for resident deletion requests)
Legal & Retention Check
We evaluate whether any data must be retained due to:
- Financial record obligations (e.g., audit compliance)
- Pending legal disputes or regulatory proceedings
- Statutory retention requirements
Deletion or Anonymisation
Where permitted, we will:
- Remove personal identifiers from active systems; or
- Anonymise data so it can no longer identify you; or
- Execute full deletion from all active systems
Confirmation Notice
You will receive written confirmation (by email) once deletion or anonymisation is complete, specifying what was deleted and any data retained with justification.
6.Society-Level Termination Deletion
Upon subscription termination by a Society:
- Data export is available for 90 days after termination
- Active data is deleted within 30 days after the export window closes
- Backup data is securely expired or overwritten within 180 days
Written confirmation of deletion may be requested at any time.
7.Data That Cannot Be Immediately Deleted
Certain data may be retained where required for:
- Tax compliance and statutory accounting (up to 8 years)
- Statutory audit requirements
- Ongoing legal proceedings or regulatory investigations
- Fraud prevention investigations
Such retained data shall be restricted from operational use and stored securely until the retention obligation expires.
8.Appeal Process
If a deletion request is denied (fully or partially), you may submit an appeal within 15 days of receiving the denial notice.
Appeals shall be reviewed and responded to within 30 days.
Escalate to our Grievance Officer at grievance@gateflux.co.
9.Backup & System Logs
Deletion from active systems does not immediately remove data from secure backups.
- Backup retention maximum: 180 days
- Data is not actively processed during the backup retention period
- Secure overwrite is executed at expiry
10.Fraud & Abuse Safeguards
Deletion requests may be denied or delayed if:
- Fraud is suspected or under investigation
- A legal hold or regulatory freeze applies
- Identity cannot be satisfactorily verified
11.Cross-Border Considerations
Where GDPR applies, erasure requests are handled under Article 17. Processing timelines are aligned with GDPR requirements.
12.Contact Information
Data Protection Contact
GateFlux Pvt. Ltd., Godavari Homes, Quthbullapur, Hyderabad 500067, Telangana, India
Email: privacy@gateflux.co
Acknowledgement: Within 72 hours
Processing: Within 30 days
Grievance Officer: grievance@gateflux.co
Submit a deletion request to
privacy@gateflux.co