Data Retention & Deletion Policy
Information about data retention, account suspension, and your privacy rights at Vistarkriya
Important: Regulatory Data Retention
As a financial services platform, we are legally required to retain certain data for regulatory compliance. Immediate permanent deletion is not available.
Quick Navigation
Overview
This Data Retention & Deletion Policy ("Policy") explains how VistarKriya Marketings Private Limited ("Company", "we", "us", "our"), operating Vistarkriya ("Platform"), handles data deletion requests and why we are required to retain your data for specific periods.
CRITICAL: IMMEDIATE DATA DELETION IS NOT AVAILABLE
Vistarkriya is a financial services and CRM platform that operates under strict regulatory requirements in India. Due to legal, tax, and regulatory compliance obligations, we cannot permanently delete your data immediately upon request.
Instead, we offer Account Suspension (Soft Delete) which restricts access to your data while retaining it for the legally mandated period.
This policy complies with:
- Meta/Facebook WhatsApp Business Platform Policy
- Reserve Bank of India (RBI) Guidelines on data retention
- Income Tax Act, 1961 — 8-year record retention requirement
- Prevention of Money Laundering Act (PMLA), 2002 — KYC retention requirements
- Information Technology Act, 2000
- Digital Personal Data Protection Act, 2023
- Companies Act, 2013 — Record keeping requirements
Why We Cannot Delete Your Data Immediately
As a platform facilitating financial services including loans, credit reports, KYC verification, and business transactions, we are legally obligated to retain records. Here's why:
🏛️ Regulatory Compliance
- RBI Guidelines: Financial intermediaries must maintain transaction records for audit and compliance purposes
- PMLA Compliance: KYC records must be retained for 5 years after business relationship ends
- Tax Laws: Financial records must be retained for 8 years for Income Tax compliance
- GST Compliance: Invoice and transaction records must be retained for 6 years
⚖️ Legal & Dispute Resolution
- Records required for potential legal proceedings or disputes
- Evidence preservation for fraud prevention and investigation
- Compliance with court orders and regulatory inquiries
- Protection against false claims and chargebacks
🏦 Third-Party Obligations
- Data shared with banks/NBFCs is governed by their retention policies
- Credit bureau records have separate retention requirements
- Government verification records (Aadhaar, PAN) have regulatory retention periods
Legal Basis for Retention
Under Section 8(3) of the Digital Personal Data Protection Act, 2023, data fiduciaries may retain personal data if required for compliance with any law in force. Our retention practices are based on legitimate legal requirements, not business preference.
Data We Collect
When you interact with us through WhatsApp, our platform, or any other channel, we collect:
📱 WhatsApp Communication Data
- Phone number and WhatsApp profile name
- Message content, media, and documents shared
- Conversation timestamps and metadata
- Service requests and inquiry details
👤 Identity & KYC Data
- Name, email, phone number, address
- PAN Card, Aadhaar (via DigiLocker), and other ID documents
- Photographs and selfies for verification
- Business registration documents (GST, Shop Act, etc.)
💰 Financial & Transaction Data
- Bank account details
- Payment transaction records
- Loan application and lead data
- CIBIL/Credit report requests
- Wallet transactions and balances
🌐 Technical & Usage Data
- IP addresses, device information, browser data
- Login history and session data
- Platform usage patterns and activity logs
Your Data Rights
Under applicable data protection laws, you have the following rights:
Right to Access
Request a copy of your data
Right to Correction
Request correction of errors
Right to Opt-Out
Stop marketing communications
Right to Suspend
Suspend your account
Limitation on Right to Erasure
While you have a general right to erasure under data protection laws, this right is NOT absolute. We may refuse erasure requests where retention is necessary for:
- Compliance with legal obligations (tax, RBI, PMLA)
- Establishment, exercise, or defense of legal claims
- Archiving purposes in the public interest
- Fraud prevention and security
In such cases, we offer Account Suspension as an alternative.
Account Suspension (Soft Delete)
Instead of immediate permanent deletion, we offer Account Suspension which provides you with privacy protection while allowing us to meet our legal obligations.
What is Account Suspension?
Account Suspension (also known as "Soft Delete") is a process where:
- Your account is deactivated and marked as suspended
- Your data becomes inaccessible for normal operations
- You will no longer receive any communications from us
- Your data is retained securely for legal compliance
- After the mandatory retention period, data is permanently deleted
✅ What Suspension Does
- Stops all active services: Your account access is revoked
- Stops all communications: No WhatsApp messages, emails, SMS, or calls
- Removes from active databases: Data moved to secure archive
- Blocks login access: You cannot log in to the platform
- Stops data processing: No further processing for business purposes
- Hides from search: Your data not used for any matching or lead routing
🔒 What Suspension Retains (For Compliance)
- Transaction records: Retained for 8 years (Income Tax Act)
- KYC documents: Retained for 5-8 years (PMLA, RBI)
- Financial service records: Retained for 8 years (GST, Tax)
- Communication logs: Retained for 3-5 years (Dispute resolution)
- Consent records: Retained for 8 years (Legal evidence)
What Happens to Your Data After Suspension
📋 Suspension Process
Step 1: Request Received
You submit an account suspension/deletion request through any available channel.
Step 2: Verification (1-3 Days)
We verify your identity via OTP or other means to confirm the request is legitimate.
Step 3: Account Suspended (Within 7 Days)
Your account is marked as suspended. All active services stop. You are removed from all communication lists.
Step 4: Data Archived
Your data is moved from active databases to secure, encrypted archives accessible only for legal/compliance purposes.
Step 5: Retention Period
Data is retained in archives for the legally mandated period (up to 8 years depending on data type).
Step 6: Permanent Deletion
After the retention period expires, data is permanently and irreversibly deleted from all systems including backups.
Confirmation
You will receive a confirmation email/SMS once your account has been suspended. This confirmation serves as acknowledgment that your request has been processed.
Mandatory Retention Periods
The following retention periods are mandated by Indian law and cannot be shortened:
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Financial Transaction Records | 8 Years | Income Tax Act, 1961 |
| KYC Documents (PAN, Aadhaar) | 5-8 Years | PMLA, RBI Guidelines |
| GST Invoices & Records | 6 Years | GST Act, 2017 |
| Loan/Lead Application Records | 8 Years | RBI Guidelines, Tax Laws |
| Consent & Agreement Records | 8 Years | Contract Act, Evidence Act |
| Communication Logs (WhatsApp, Email) | 3-5 Years | IT Act, Dispute Resolution |
| Account & Login Records | 5 Years | IT Act, Security |
| Marketing Preferences | Deleted on Suspension | — |
Retention Period Start Date
Retention periods begin from:
- For transactions: Date of the transaction
- For KYC: Date of last business transaction or account closure
- For communications: Date of the communication
How to Request Account Suspension
You can request account suspension (data deletion request) through any of the following methods:
📧 Method 1: Email Request
Email: hello@vistarkriya.com
Subject: "Account Suspension Request - [Your Phone Number]"
Include in your email:
- Your full name
- Registered phone number (with country code)
- Registered email address
- Reason for suspension request (optional)
💬 Method 2: WhatsApp Message
WhatsApp: 8810435165
Message: "SUSPEND MY ACCOUNT" or "DELETE MY DATA"
📞 Method 3: Phone Call
Phone: 8810435165
Hours: Monday to Saturday, 10:00 AM to 6:00 PM IST
Verification Required
To protect your account from unauthorized suspension requests, we will verify your identity via OTP sent to your registered phone number before processing the request.
Before You Request Suspension
Please note:
- NO REFUNDS: All payments are non-refundable regardless of suspension
- Wallet Balance: Core Wallet may be withdrawn (subject to terms); Pipeline Wallet is forfeited
- Pending Services: Any pending services will be cancelled
- Irreversible: Account reactivation may not be possible after suspension
Third-Party Data
Your data may have been shared with third parties before your suspension request. Please note:
🔗 Meta/WhatsApp
Meta processes data through WhatsApp Business Platform under their own policies. To address data held by Meta:
- Delete your WhatsApp account through the app
- Submit request via Meta's Data Request Form
🏦 Banks, NBFCs & Financial Partners
Data shared with financial institutions is governed by their retention policies and RBI guidelines. Contact them directly for any data requests.
📊 Credit Bureaus
Credit report data is managed by credit bureaus (CIBIL, Experian, Equifax, CRIF). Contact them directly for disputes or corrections.
Our Limitation
We can only suspend/archive data within our direct control. Data already transmitted to third parties before your request cannot be recalled. We will, however, stop any future data sharing upon suspension.
Contact Us
For questions about this policy or to submit a data/suspension request:
Data Protection Officer
VistarKriya Marketings Private Limited
(VistarKriya Marketings Private Limited)
Email: hello@vistarkriya.com
Phone: 8810435165
WhatsApp: 8810435165
Correspondence Address:
55, 3rd Floor, Westend Marg, Saidullajab,
Near Saket Metro, New Delhi 110030, India
Registered Office:
3rd Floor, Shree Jee Plaza, New Road,
Dalanwala, Dehradun, Uttarakhand 248001
Response Time: We acknowledge requests within 48 hours and complete processing within 7 business days.
Summary: What Happens When You Request "Data Deletion"
| ✅ What We DO: | Suspend account, stop services, stop communications, archive data securely |
| ❌ What We CANNOT Do: | Immediately delete data (legal requirements) |
| ⏱️ Timeline: | Account suspended within 7 days; Data deleted after 5-8 years (per data type) |
| 💰 Refunds: | No refunds provided |
Related Policies
Need Assistance?
VistarKriya Marketings Private Limited — Committed to regulatory compliance and your privacy