● Legal

User Data Deletion Policy

Last updated: July 9, 2026

This policy explains how Store Console handles requests to delete user data from storeconsole.com and the Store Console platform. It applies to account holders, trial users, and anyone whose personal data we process, and is designed to meet the requirements of the GDPR (Right to Erasure, Article 17), the CCPA/CPRA (Right to Delete), and other global data-protection laws. If you signed up using Facebook Login, instructions specific to Facebook Account Deletion are included below.

1. What data we delete

When we receive a verified deletion request, we delete or permanently anonymise:

Account data — your name, email address, phone number, profile picture, and any saved addresses or payment methods linked to your account on our site.
Communications — support tickets, sales enquiries, and form submissions linked to your email address, subject to applicable record-keeping obligations.
Usage & analytics data — browsing activity and device information tied to your user ID or IP address.
OAuth / social identities — any Facebook, Google, or other social-login identifiers linked to your account (see section 5 for Facebook-specific steps).

Important: Store Console is a self-hosted commerce and ERP platform. The data your customers store in your installation of Store Console is controlled and processed by you, not by us. If you are a customer of one of our clients, contact that client directly to exercise your deletion rights. This policy covers only data held by Store Console (the company that operates storeconsole.com).

2. What we may retain

Under certain legal frameworks, we may retain limited data after a deletion request even after your account is deleted:

Transaction records — We are legally required to keep financial transaction records (invoices, payment receipts, refund records) for tax and accounting purposes. These are retained in accordance with applicable statutory periods (typically 5-7 years depending on your country). Only the minimum data needed for the record is kept — billing contact name, transaction amount, date, and a masked reference to the payment method.
Licence & subscription history — A minimal record of your licence or subscription may be retained to demonstrate compliance with software-licensing terms and to prevent fraud. This is limited to a hashed identifier and a date range.
Legal holds — If we are required by legal process (court order, regulatory investigation) to preserve data, we will comply with that obligation and notify you where permitted.

3. How to request deletion

You can request deletion of your data in two ways:

Self-service (recommended) — Log in to your account, go to My Account → Settings → Delete Account. Follow the on-screen confirmation. Your account and associated data will be deleted or permanently anonymised within 30 days.
Email request — Send a deletion request from the email address linked to your account to [email protected]. Include "Delete My Data" in the subject line. We will verify your identity before processing.

We will respond to your request within 30 days (or shorter where local law requires, such as 15 days under the CCPA/CPRA for California residents). If we cannot process your request within that timeframe, we will notify you with the reasons and the expected completion date.

4. Verification

To protect your data and prevent fraudulent deletion requests, we may ask you to verify your identity before processing. This typically means confirming from the email address on file or, where sensitive data is involved, providing additional proof of identity. We will never charge a fee for a deletion request.

5. Facebook App — User Data Deletion

If you connected to Store Console using Facebook Login, you can delete the data we received from Facebook in two ways:

Option 1 — Through Facebook: Go to your Facebook Settings & Privacy → Apps and Websites, find "Store Console", and click Remove. This revokes the permission and prompts Facebook to send us a deletion signal. We will process the deletion as described in section 1 within 30 days.
Option 2 — Directly with Store Console: Follow the steps in section 3 (self-service or email) and we will delete the Facebook-linked data together with your account.

Facebook Data Deletion callback URL: https://storeconsole.com/user-deletion — Facebook uses this URL for its app review process. When Facebook sends a deletion callback, we process it and return a confirmation status to Facebook.

6. GDPR — Right to Erasure (Article 17)

If you are in the European Economic Area or the United Kingdom, you have the right to request erasure of your personal data without undue delay where one of the following grounds applies:

The data is no longer necessary for the purpose it was collected;
You withdraw consent and no other legal basis exists;
You object to processing based on legitimate interests and we have no overriding grounds;
The data has been unlawfully processed;
Erasure is required to comply with a legal obligation.

This right is not absolute — we may refuse a deletion request where the data is needed to exercise the right of freedom of expression and information, to comply with a legal obligation, for the establishment or defence of legal claims, or for archiving purposes in the public interest.

7. CCPA/CPRA — Right to Delete (California)

If you are a California resident, you have the right to request deletion of personal information we have collected from you, subject to certain exceptions (such as completing a transaction, detecting security incidents, complying with a legal obligation, or exercising free speech). We will not discriminate against you for exercising this right. To exercise your right, follow the instructions in section 3 or email [email protected] with "CCPA Deletion Request" in the subject line.

8. Data portability

In jurisdictions where the right to data portability applies (GDPR Article 20, CCPA/CPRA Right to Data Portability), you may request a copy of your personal data in a structured, commonly used, machine-readable format before deletion. Include "Data Portability Request" in the subject line of your email to [email protected].

9. Third-party services

If you used third-party services through Store Console (such as payment gateways, analytics tools, or the Paddle checkout), deletion of data from those services must be requested directly from each provider. We will delete any data we hold about you as described in section 1, but we cannot control the data retention practices of independent third parties.

10. Changes to this policy

We may update this User Data Deletion Policy to reflect changes in our practices or legal obligations. Material changes will be posted here with a new "last updated" date. Continued use of the Services after changes constitutes acceptance of the updated policy.

This policy is effective as of the date above and governs your use of Store Console. Where local consumer-protection law (such as the EU/UK or California) grants you stronger rights, that law prevails.

Questions? Contact us at [email protected].