Data Deletion Policy

1. Who this policy is for

This policy explains how to have personal data removed from PlateLogic. It covers three cases: a diner who ordered from a restaurant using PlateLogic, a staff member with console access, and a restaurant subscriber closing an account.

For diner data the restaurant is the data controller and PlateLogic acts on its instructions. You may contact either us or the restaurant — if you contact us, we will action or forward the request and confirm the outcome.

2. How to request deletion

Email info@plate-logic.com with the subject "Data deletion request" and include: the email address and/or phone number used, the restaurant name if you are a diner, and whether you want your whole profile deleted or only specific data (for example a delivery address or a review).

• Signed-in guests can also delete their saved profile details from the account page, and staff or owner accounts can be removed by the restaurant's owner from the team console.
• We verify identity before deleting — usually by confirming control of the email address or phone number on the record. We may decline a request we cannot verify.
• We acknowledge requests within 5 business days and complete verified requests within 30 days (45 days where an extension is legally permitted, with notice to you).

3. What gets deleted

• Account credentials, profile name, email address, phone number and marketing preferences.
• Saved delivery addresses, saved payment method references, loyalty balances and store credit (unused balances are forfeited on deletion).
• Push notification tokens and device registrations.
• Review text and ratings you authored, or anonymisation of them at your choice.
• Support correspondence not needed for a live dispute.
• For a closing restaurant account: menus, staff records, integration credentials, uploaded assets, channel feeds and custom domain bindings.

4. What we must keep, and why

Some records cannot be deleted on request because we are legally required to keep them or need them to defend claims. Where we keep a record we minimise it — typically to an order number, amounts, tax data and timestamps — and strip direct identifiers where possible.

• Financial and tax records for completed orders, refunds and subscription invoices: up to 7 years.
• Payment records held by our payment processor under its own retention rules; we ask it to delete customer objects where permitted.
• Messaging suppression and opt-out entries: kept indefinitely so we never message you again after you unsubscribe or reply STOP.
• Security, fraud and audit logs: up to 24 months.
• Data subject to a legal hold, subpoena, chargeback or active dispute, until it is resolved.
• Aggregated or de-identified analytics that can no longer identify you.

5. Deletion mechanics and timeline

Verified deletions are removed from live systems immediately or within 30 days. Encrypted backups roll off on a rotating schedule and are fully purged within 90 days; we do not restore deleted records from backup except to recover from a system failure, in which case the deletion is re-applied.

We also instruct our subprocessors to delete the affected data where their contracts and legal duties allow. We cannot delete data a restaurant exported to its own systems, or data held by a marketplace, courier or POS provider under its own terms — contact those providers directly.

6. Restaurant account closure

Cancel the subscription from the billing portal. After cancellation you have 30 days to export menus, customers, orders and reviews from the manage console. At the end of that window, account content is queued for deletion and removed from live systems within a further 30 days, subject to the retained records listed above. Ask us in writing if you need an immediate deletion instead of the 30-day export window.

7. Contact

MagnetIQ Marketing Solutions — 18203 Rim Dr 101-1008, San Antonio, TX 78257, USA. Deletion and privacy requests: info@plate-logic.com. See also our Privacy Policy and Terms and Conditions.