1. Right to Erasure & Account Closure
Under the Digital Personal Data Protection Act, 2023 (DPDP Act), every user has the right to request erasure of their personal data and permanent closure of their user account when the purpose for which such data was collected has ceased to exist.
VYPNEX respects this right and provides transparent, straightforward mechanisms for users to export their records and initiate formal account termination.
2. Mandatory Indian Tax Retention (GST Act)
Statutory Legal Exception to Immediate Erasure: Under Indian law, business accounting records cannot be arbitrarily destroyed upon a user's request.
- Section 36 of the CGST Act, 2017: Every registered taxable person is legally mandated to maintain and preserve all accounts, tax invoices, bills of supply, delivery challans, and double-entry registers for a minimum period of 72 months (6 years) from the due date of filing the relevant annual return.
- Counterparty Audit Rights: When you issue a sales invoice to a buyer on VYPNEX, that invoice constitutes the buyer's legal Input Tax Credit (ITC) claim record. Unilateral deletion of finalized invoices would compromise statutory tax records of third-party commercial partners.
3. What Gets Deleted vs What Must Be Retained
Eligible for Immediate Deletion (30 Days)
- User login credentials, encrypted passwords, and session tokens.
- Optional imported phone contacts from your device.
- Draft unfinalized invoices and quotation notes.
- Marketing preferences, notification settings, and user telemetry.
- Public directory listing and marketplace visibility.
Retained Under Statutory Tax Laws (6 Years)
- Finalized sales invoices and purchase inward records.
- GSTIN, PAN, and registered legal entity name associated with issued bills.
- Historical double-entry party ledger entries required for GST audit.
- Subscription payment UTR numbers for banking reconciliation.
4. Step-by-Step Deletion Request Process
To request data deletion or account closure, follow these steps:
- Navigate to Profile: Log in to your account and go to Profile → Privacy & Security → Account Closure.
- Select Request Type: Choose between (a) Full Account Closure, or (b) Imported Device Contacts Removal.
- Verify Identity: Confirm your request using OTP verification sent to your registered mobile number and email.
- Confirmation & Review: Our compliance team acknowledges receipt within 48 hours and executes eligible data erasure within 30 days.
Alternative Manual Request:
If you cannot log in, email your request to vypnexsupport@gmail.com from your registered email address with proof of authorized business representation.
5. Exporting Your Data Before Closure
We strongly urge all business owners to export their complete accounting ledgers, product catalogues, customer balances, and historical invoices in Excel/CSV format prior to submitting an account closure request. Once an account is deactivated, self-service dashboard access is revoked.