Account Deletion

Last Updated: 21 May 2026

Effective Date: 21 May 2026

This page explains how to request deletion of your Deltern account, what happens to your data when your account is deleted, and your rights regarding data erasure under the Personal Data Protection Act 2010 (PDPA) of Malaysia.

---

You can request deletion of your account through any of the following methods:

Method 1: In-App (Recommended)

1. Open Deltern Field, Deltern Go, or Deltern Command on your device
2. Navigate to Settings > Account > Delete Account
3. Confirm your identity by entering your password or PIN
4. Review the data deletion summary showing what will be deleted and what will be retained
5. Tap "Delete My Account" to submit the request

Method 2: Web Portal

1. Log in to your Deltern Hub portal at https://deltern.com
2. Go to Settings > Account > Delete Account
3. Follow the on-screen identity verification and confirmation steps

Method 3: Email

Send an email to support@nelvyx.io with the following information:

• Subject line: Account Deletion Request
• Include: Your full name, registered email address, and the company (Tenant) you belong to
• We will verify your identity before processing the request. You may be asked to confirm from your registered email address.

Method 4: Contact Your Administrator

Your company administrator (Tenant admin) can delete your account directly from the Deltern Hub administration panel under Team Management > Users. This is the fastest method if your administrator is available.

---

Upon receiving your deletion request, the following process is initiated:

1. Immediate deactivation — Your account is disabled and you can no longer log in to any Deltern application
2. Session termination — All active sessions and authentication tokens are immediately revoked across all devices
3. Device data wipe — Locally stored data on your device (SQLite database, cached files) is cleared at next app launch or can be cleared manually by uninstalling the application
4. Data processing — Our systems begin the permanent deletion and anonymization process as described below

---

The following personal data is permanently and irreversibly deleted from our servers:

Data Category	Details
Profile information	Full name, email address, phone number, profile photo/avatar
Authentication credentials	Password hash (Argon2id), PIN, biometric enrolment status
Device records	All registered device entries, device IDs, FCM push notification tokens
Session data	All active sessions, JWT access tokens, refresh tokens — immediately revoked
Personal preferences	Language settings, notification preferences, dashboard layout preferences
Biometric references	Any server-side references to biometric authentication status (device-local biometric data is managed by your device's operating system)

---

Certain business records are anonymized rather than deleted. This means your personal identity is permanently removed from the records, but the business transaction data is retained for your employer's operational continuity and regulatory compliance.

Data Category	Retention	Reason
Orders	Retained (anonymized)	Financial records, tax audit compliance
Invoices	Retained (anonymized)	Accounting audit trail, Companies Act 2016
Delivery records	Retained (anonymized)	Proof of delivery, dispute resolution
Collection records	Retained (anonymized)	Financial reconciliation, payment tracking
Attendance records	Retained (anonymized)	Employment law compliance (Employment Act 1955)
Payroll records	Retained (anonymized)	Tax compliance (Income Tax Act 1967)
Expense claims	Retained (anonymized)	Financial audit trail
Audit logs	Retained (anonymized)	Regulatory compliance, security audit

How anonymization works:

• Your name and personal identifiers are replaced with a generic placeholder: "Deleted User"
• Your email, phone number, and other encrypted PII fields are permanently purged
• The anonymized records cannot be re-linked to your identity
• Business transaction amounts, dates, and reference numbers are preserved for your employer's records

---

Certain records must be retained for minimum periods as required by Malaysian law, even after your account is deleted:

Legal Requirement	Data Retained	Minimum Retention
Companies Act 2016	Financial transaction records (anonymized)	7 years from creation
Income Tax Act 1967	Payroll and tax-related records (anonymized)	7 years from the relevant year of assessment
Employment Act 1955	Employment-related records (anonymized)	As required by law

All legally retained data is in anonymized form — your personal identity is not associated with these records.

---

Step	Timeline
Deletion request submitted	Processed immediately
Identity verification	Within 2 business days
Account deactivation	Within 3 business days of verified request
Personal data deletion begins	Immediately upon deactivation
Permanent deletion completed	Within 30 calendar days of request
Confirmation notification	Sent via email upon completion

Note: Your account is deactivated immediately upon verification (you cannot log in), but the complete data deletion process across all systems and backups is completed within the 30-day window.

---

If you change your mind, you can cancel the deletion request within 7 days of submission:

1. Via email: Send an email to support@nelvyx.io with the subject line "Cancel Account Deletion" from your registered email address
2. Via administrator: Your company administrator can cancel the pending deletion request from the Deltern Hub admin panel

After the 7-day cancellation window, the deletion process becomes permanent and irreversible. Your account and personal data cannot be recovered.

---

We strongly recommend exporting your data before requesting account deletion:

How to export your data

1. Log in to Deltern Hub > Settings > Privacy > Export My Data
2. Select the data categories you wish to export
3. Submit the export request

Export details

• Your data archive will be prepared within 48 hours
• The archive is provided in JSON and CSV formats for machine readability
• A secure download link will be sent to your registered email address
• The download link is valid for 7 days
• Exported data includes: profile information, attendance records, order history, delivery records, and expense claims associated with your account

Tip: Request your data export before submitting an account deletion request, as you will not be able to access the platform once your account is deactivated.

---

When your account is deleted:

• Push notifications — All FCM tokens are deleted; you will no longer receive push notifications from Deltern
• WhatsApp notifications — If you received WhatsApp messages through Deltern (e.g., invoice notifications), these will stop. Message history on WhatsApp is managed by Meta and is outside our control
• Email communications — You will receive a final confirmation email after deletion is complete. You will be removed from all Deltern mailing lists
• Shared content — Photos, signatures, and documents you contributed to business transactions (orders, deliveries) will be retained in anonymized form as described in Section 4
• Tenant impact — Your deletion does not affect other users or the Tenant's account. Your employer retains access to anonymized business records

---

If you are a Tenant administrator and wish to delete the entire company account and all associated data:

1. Contact support@nelvyx.io or your assigned account manager
2. Ensure all outstanding invoices and subscription fees are settled
3. Export all required business data before requesting deletion
4. All user accounts, business data, uploaded files, and the dedicated database schema will be permanently deleted within 30 days of the verified request
5. A final confirmation will be sent to the Tenant administrator's email

Warning: Tenant account deletion is permanent and affects all users under the Tenant. Ensure all users are informed and data is exported before proceeding.

---

For questions about account deletion or data erasure:

Nelvyx Sdn. Bhd.

• General Support: support@nelvyx.io
• Data Protection Officer: dpo@nelvyx.io
• Website: https://deltern.com
• Address: Kuala Lumpur, Malaysia

You also have the right to lodge a complaint with the Jabatan Perlindungan Data Peribadi (Department of Personal Data Protection) Malaysia at https://www.pdp.gov.my.