User Data Deletion

1. Sign in to the Research Analyst portal at ra.aktai.app.
2. Go to Settings → Firm → Your account and choose Delete my account.
3. Confirm the request. Your account is now in the 7-day grace window.

You can cancel the request from the same screen at any time within 7 days. If you are the only owner of your firm, transfer ownership or close the firm first; the request is refused until then. Other Aktai accounts use the email route below.

Email [email protected] from the address registered to your account, with subject line “Data deletion request”.

Include:

• The email address on your Aktai account
• (Optional) The phone number or WhatsApp number you receive alerts on

We respond within 30 days as required by GDPR / DPDP Act, but typical turnaround is under 48 hours. The same 7-day grace window applies, if you change your mind, reply to the same thread before the window elapses.

After the 7-day grace window an automated nightly job deletes the items below. If you approved research notes or calls for a Research Analyst firm, your account is instead kept as an anonymised record (name, email, phone number and password removed) so the firm's Regulation 25 records still show that one person approved them. Everyone else is deleted outright.

• Your account record (name, email, password hash, OAuth links, SEBI registration details)
• The client data you loaded: client names, contact details, and portfolio holdings
• WhatsApp and email delivery bindings and settings
• Your research notes and the Regulation 25 audit log, once any retention obligation you have asked us to hold has lapsed
• Team-member access records tied to your account

What we retain (and why):

• Research notes and calls you approved for a firm, 5 years under SEBI Regulation 25, with your name and contact details removed
• Payment records, 7 years, required by Indian tax law (and similar requirements in other jurisdictions). Retained in Stripe; reduced to anonymised invoice metadata on our side.
• Server logs, auto-purged at 30 days regardless of account state
• Aggregated, fully anonymised analytics, counts and trends with no link back to you

• Day 0, you submit the request
• Day 0–7, grace window; you can still log in and cancel
• Day 7+, nightly cron deletes or anonymises the account on the next run; we email a confirmation

This process is designed to satisfy:

• India, DPDP Act 2023 (right to erasure, § 12)
• EU / UK, GDPR Article 17 (right to be forgotten)
• California, CCPA § 1798.105 (right to delete)
• Meta Platform Terms, User Data Deletion requirement for apps using WhatsApp Business / Facebook Login

If you are unsatisfied with our response you may escalate to your local data protection authority. See our Privacy Policy for the full list.

Email [email protected]. Response within 30 days, usually within 48 hours.