Data Deletion Instructions

This page explains how to request deletion of personal data that Posterita Ltd (“Posterita”, “we”, “us”) holds about you. It applies to data you provided directly when using Posterita Retail OS, as well as data obtained through Meta platforms (Facebook Login, WhatsApp Business, Instagram) when Posterita acts as a technology provider for a merchant using our Service.

For the broader context of how we collect and use your data, see our Privacy Policy.

1. Who can request deletion

• Account owners — merchants who created a Posterita account.
• Staff users — employees added to a merchant’s Posterita account.
• Shoppers — end customers whose data was recorded by a merchant using Posterita (e.g. loyalty profile, order history, WhatsApp conversation with Posterita’s Nina assistant).

Where Posterita acts as a data processor on behalf of a merchant (for example, shopper data uploaded by that merchant), we will route the request to the merchant who controls that data and assist them in fulfilling it. Under the Mauritius Data Protection Act 2017, the merchant is the data controller for shopper data they upload.

2. How to request deletion

Send an email to the address below with the subject line “Data Deletion Request”.

support@posterita.com

Please include in the email:

• Your full name.
• The email address and / or phone number associated with your Posterita account or shopper profile.
• If your data was collected through a Meta integration, the Facebook, WhatsApp, or Instagram identifier you used (e.g. the WhatsApp number that messaged the merchant).
• The name of the merchant (if you are a shopper or staff member of a Posterita merchant).
• A brief statement confirming you are the owner of the data, or are legally authorised to act on their behalf.

3. What we will do

Within 30 days of receiving a verified request, we will:

• Verify your identity (we may ask for additional information to confirm you are who you say you are).
• Delete or irreversibly anonymise personal data we hold about you in our production systems, including account data, authentication data, conversation history with our AI assistants (Nina, Kira, Leo), loyalty data, and any data obtained through Meta platforms.
• Instruct our sub-processors (e.g. Supabase, Anthropic, OpenAI, Meta, Vercel, Render) to delete the corresponding data, where contractually possible.
• Confirm completion to you by email.

4. What we may retain

We may retain a limited subset of data after a deletion request, where we are legally required or permitted to do so. This includes:

• Financial records — invoices, receipts, and tax records that we are required to keep under Mauritius accounting and tax law (typically 7 years).
• Fraud and abuse logs — minimal records needed to prevent the same actor from re-creating an account and repeating fraudulent activity.
• Aggregated, non-identifying analytics — usage statistics that have been irreversibly stripped of personal identifiers.

All other personal data will be deleted or anonymised within the 30-day window described above.

5. Self-service options

If you have an active Posterita account, you can also:

• Stop receiving WhatsApp messages — reply STOP to any WhatsApp message from Posterita to stop receiving further messages from us. (To request deletion of past conversation history, use the email process in section 2.)

6. Contact & complaints

For any question about this process, contact us at support@posterita.com.

If you believe we have not handled your request properly, you may lodge a complaint with the Mauritius Data Protection Office.