Data Deletion

How to Request Deletion of Your Data

1. Who Can Request Deletion

You may request deletion of your personal data if you are:

• A Provider with a SolvaPay account.
• An End-User who has made a purchase through a SolvaPay-hosted checkout page.

2. How to Submit a Deletion Request

To request deletion of your personal data, please contact our Data Protection Officer:

Email: dpo@solvapay.com

In your request, please include:

• Your full name and the email address associated with your account or transaction.
• A description of the data you would like deleted (or a request for full deletion).
• Any additional information that will help us locate your records.

We may request additional information to verify your identity before processing your request. This is to protect your data from unauthorized deletion requests.

3. What Happens After You Submit a Request

Once we receive and verify your deletion request, we will:

1. Acknowledge receipt of your request promptly.
2. Identify all personal data we hold about you across our systems.
3. Delete your personal data, except where we are required or permitted by law to retain it.
4. Confirm deletion to you once the process is complete.

4. Response Timeframes

We will respond to your deletion request within the timeframes required by applicable law:

• GDPR / UK GDPR: Within one (1) month, extendable by two additional months for complex requests.
• CCPA / CPRA: Within forty-five (45) calendar days, extendable by an additional forty-five days with notice.
• PIPEDA: Within thirty (30) days.

5. Data We May Need to Retain

In certain circumstances, we may not be able to delete all of your personal data. We are required to retain certain records under applicable law, including:

• Transaction and financial records — retained for seven (7) years to comply with bookkeeping and tax obligations (Swedish Bokföringslagen; US tax and accounting requirements).
• Identity verification and KYC data — retained for the period required by applicable anti-money laundering legislation.
• Data subject to a legal hold — data relevant to pending or anticipated litigation, regulatory investigations, or disputes cannot be deleted until the hold is lifted.

Where we cannot fully comply with your deletion request due to a legal retention obligation, we will inform you of the specific basis for retention and delete all data that is not subject to a retention requirement.

6. Effect of Deletion

Please be aware that:

• For Providers: Deletion of your account data will result in the closure of your SolvaPay account. You will no longer be able to access the dashboard, receive payouts, or use the Service. Any outstanding balance will be paid out in accordance with the Terms of Service prior to deletion.
• For End-Users: Deletion of your data will remove your personal information from our systems. Active subscriptions you hold with Providers are managed between you and the Provider — please contact the relevant Provider to cancel any active subscriptions before requesting deletion.

7. Sub-Processor Data

When you request deletion, we will also instruct our sub-processors to delete your personal data in accordance with our Data Processing Agreement and sub-processor contracts. Our current sub-processors are listed at solvapay.com/legal/sub-processors.

8. Contact

If you have questions about this Data Deletion Policy or the deletion process, please contact:

SolvaPay Inc. Email: dpo@solvapay.com

For more information about your privacy rights, please see our Privacy Policy.