Data Deletion

SolarisCRM lets you request permanent deletion of any personal data we hold about you. This page describes how to make that request, what we delete, and the timeline you can expect.

1. Self-service deletion (fastest)

You can trigger most deletion actions from inside the SolarisCRM app without emailing us:

• Full account deletion — Settings → Account → Delete account. This deactivates your account immediately and schedules permanent erasure after a 30-day recovery window.
• Business data export before deletion — Settings → Data → Export. Download all your leads, contacts, deals, and proposals as CSV. Do this before deletion if you want to keep a copy.
• WhatsApp conversation deletion for a specific contact — open the contact record → three-dot menu → “Erase WhatsApp history”. This permanently removes every WhatsApp message tied to that contact from our database.

2. Request deletion by email

If you cannot log into your account or need help, email us at rishi@stellavix.in with the subject line “Delete my SolarisCRM data”. Include:

• The email address associated with your account
• The name of your organisation
• Whether you want a full account deletion or targeted data removal (e.g., only WhatsApp history for a specific contact)
• Any additional context that helps us find your data

3. What we delete

Upon a valid deletion request, we permanently erase:

• Your user profile — name, email, phone, avatar, MFA settings
• Your business data — leads, contacts, deals, proposals, notes, activities, tasks, uploaded files
• Your WhatsApp integration data — connected WABA account records, encrypted tokens, inbound and outbound messages, conversations, media stored in our S3 bucket
• Your login session cookies + refresh tokens
• Cached data — search indexes, analytics aggregates tied to you

4. What we keep

Under Indian tax law and other regulatory requirements, some data must be retained even after your account is deleted:

• Billing records + invoices — retained for 7 years from the date of the transaction as required by Indian GST law
• Anonymised aggregate usage statistics — no personal identifiers, used for capacity planning
• Fraud and abuse records — where required for legal defence or compliance with law enforcement requests

These retained records cannot be linked back to your identity.

5. Third-party services

Some of your data may also be held by third parties who process it on our behalf. When you request deletion, we forward the request to:

• Meta (WhatsApp Business Platform) — Meta stores WhatsApp message metadata under their own retention policy. Contact Meta directly to delete data they hold.
• Stripe — billing data. Stripe retains payment records under PCI DSS + tax law rules similar to ours.
• Firebase (Google) — authentication records. Deleted when we delete your account.
• AWS — infrastructure storage. Erased when the underlying records are erased in our database or S3 bucket.

6. Timeline

• Self-service deletion — takes effect within minutes; a 30-day recovery window applies to full account deletions, after which erasure is permanent.
• Email requests — acknowledged within 3 business days, completed within 30 days.
• WhatsApp message erasure — permanent, no recovery window.

7. Facebook Login data deletion callback

If you signed into SolarisCRM using Facebook Login or Meta's Embedded Signup, Meta may notify us when you revoke our app's access to your Facebook account. When we receive such a notification, we automatically erase any Facebook-linked identifiers we store for you (your Facebook user ID + WABA access token).

You can revoke SolarisCRM at any time from Facebook Settings → Business Integrations.

8. Confirmation

Once deletion is complete, we send a confirmation email to the address associated with your account (or the address you used to submit the request). Keep this email for your records.

9. Contact

For any data deletion questions, contact: rishi@stellavix.in

Stellavix
552, Dr. Ambedkar Street, Devsar
Bilimora, Gujarat – 396380
India