Coffee Mustache Logo

Data Deletion & Retention Policy

Effective date: September 16, 2025

How you can request deletion (choose any)

  • WhatsApp: message "DELETE" in our chat.
  • Email: subject "Data Deletion Request" → coffeemustache369@gmail.com from your registered email/phone.
  • In-app/web form: (when enabled) submit from the same phone/email.

We will acknowledge your request within 72 hours and complete deletion within 30 days (often sooner), unless retention is required by law (e.g., tax records).

What we delete

  • Customer profile: name, phone, email, saved preferences.
  • Personalization & session history: favorites, visit streaks, local recommendations.
  • Marketing consents: we set marketing to opt-out and suppress future campaigns.
  • WhatsApp marketing data: lists, tags, segments tied to your number.
  • Support/chat content: we remove user-identifiable messages from our CRM where feasible.

What we retain (and why)

  • Order, invoice, and transaction records: retained for legal/financial purposes (typically 7 years).
  • Security/fraud logs: minimal elements kept up to 13 months.
  • Backups: encrypted backups may retain data up to 90 days after deletion, then are purged on a rolling basis.

WhatsApp-specific

  • Opt-out: send "STOP" anytime to stop all marketing on WhatsApp.
  • Utility messages: if you place an order, we may still send essential updates required to deliver the service you requested.
  • Deletion via WhatsApp: sending "DELETE" triggers our standard identity verification and deletion workflow.
  • BSP/Meta logs: delivery/read receipts may persist for audit for up to 13 months.

Staff (biometric) deletion

On request from the café/admin or the staff member, we will stop processing and delete biometric vectors (via FaceIO) and remove attendance mappings, except where required for payroll disputes or legal obligations.

Café owners/admins

When a café terminates service, we delete their dashboard users and café-level configurations within 30 days, after required invoice/records retention.

Identity verification

To protect you, we may ask you to verify access to the registered phone/email (or provide a nominal OTP) before actioning deletion.

Confirmation

We will send a confirmation message on WhatsApp or email when deletion is complete (or explain any lawful retention).

Contact (Grievance/Privacy)

coffeemustache369@gmail.com