DPDP Act 2023 Section 12(1)(d) Compliant

Data Deletion & Right to Erasure Policy

Comprehensive statutory rules governing account termination, data purging timelines, and legal retention exemptions across TradeNov.

Right to Erasure (डेटा डिलीट करने के नियम)Section 12(1)(d) DPDP Act

Under Section 12(1)(d) of the Digital Personal Data Protection Act, 2023, every Data Principal possesses the sovereign right to request the erasure of their personal data when the original purpose of collection is fulfilled or when consent is revoked. This document outlines TradeNov's step-by-step deletion procedure, verification protocols, and statutory record retention exceptions.

1. How to Request Account & Data Deletion

You can execute a data deletion request through either of the following two verified channels:

ASelf-Service In-App Deletion

1. Log in to your TradeNov mobile app or web portal.
2. Navigate to Settings > Security > Account Privacy.
3. Select "Delete Account & Erase Personal Data".
4. Confirm ownership via the 6-digit OTP dispatched to your registered mobile/email.

BWritten Grievance Email Request

Send an email from your registered email ID to support@tradenov.com with the subject: "Request for Account & Personal Data Erasure". Our privacy desk will issue an OTP challenge to confirm your identity within 24 hours.

2. Scope of Erasure: What Gets Deleted vs. Statutorily Retained

Data Purged Immediately (Within 72 Hours of Verification):

Personally identifiable credentials (Full Legal Name, Email, Mobile Number).
Cryptographically hashed passwords and active JWT login sessions.
Device fingerprints, IP logs, push notification tokens, and FCM keys.
In-app support chat transcripts, helpdesk attachments, and survey responses.
Watchlists, notification preferences, and saved market segment filters.

Statutory Record Retention Exceptions (Section 8(7) DPDP Act):

Under Indian law, certain transaction records cannot be deleted immediately and must be preserved in an isolated, encrypted statutory vault:

Tax & Financial Invoices: Retained for 8 years as mandated under Section 44AA of the Income Tax Act, 1961, Section 36 of the CGST Act, 2017, and the Companies Act, 2013.
Platform Signal Integrity & Audit Logs: Immutable trade setup timestamps, entry-exit history, and unlock logs retained for 3 to 5 years under marketplace transparency and fraud-prevention rules to ensure tamper-evident records.
CERT-In Security Access Logs: System firewall and IP connection access logs retained for 180 days under CERT-In Directions (Section 70B IT Act).

*Note: Statutorily retained records are completely isolated and never used for marketing, analytics, or profiling.

3. Mandatory Wallet Balance Withdrawal Prior to Erasure

Before submitting an account erasure request, traders must initiate a bank withdrawal for any remaining unspent wallet balance (minimum ₹500) via Wallet > Request Withdrawal. Once account deletion is finalized, the internal wallet ledger is terminated and unwithdrawn funds cannot be recovered through the app.