طلب حذف الحساب والبيانات

Data Deletion Instructions - Pastel Last Updated: 4 Oct 2026 | https://pastel-eg.com/data-deletion 1. What is a Tenant? Tenant = a business account (studio, photographer, atelier) using Pastel as SaaS. Each Tenant has isolated data: bookings, clients, staff accounts, portfolio media, connected social accounts (Facebook/Instagram/Google), payment records, WhatsApp templates. 2. How Tenant Deletes ALL Its Data (Full Account Deletion) Method A - Self-Serve (Immediate): Login as Tenant Admin at https://pastel-eg.com/login Go to Dashboard > Settings > Danger Zone > Delete Tenant Account Type your business name to confirm Click Delete. System will: Revoke all Google OAuth tokens (via Google revoke API) Revoke all Meta access tokens and call Meta data_deletion callback Delete all bookings, clients, staff, media from storage (S3/Dokploy volumes) Anonymize payment records (keep only invoice ID for legal accounting 3 years, no personal data) Permanently delete tenant DB schema You receive confirmation email within 7 business days. Total deletion completed within 7 days (Google requirement: immediate revoke, Meta requirement: 7 days). Method B - Email Request: Send email from your registered admin email to info@pastel-eg.com with subject Tenant Data Deletion - [Your Business Name]. Include business name and admin email. We process within 7 days and send confirmation with deletion code. 3. How Tenant Deletes Specific Data Only Disconnect Google only: Settings > Connected Accounts > Google > Disconnect. Token revoked instantly at https://myaccount.google.com/permissions (remove Pastel) + deleted from our DB within 24h. Disconnect Meta only: Settings > Connected Accounts > Facebook/Instagram > Disconnect. Or Facebook > Settings > Business Integrations > Remove Pastel. Token deleted within 24h. No further posting. Delete single booking/client: Bookings > Select > Delete. Deleted immediately, backup removed in 30 days. Delete portfolio media: Media > Select > Delete Permanently. 4. For End Users (Clients who booked via Tenant) Client data is controlled by Tenant. To delete your client data: contact the Tenant directly, or email us at info@pastel-eg.com with subject "Client Data Deletion" - we will forward to Tenant and ensure deletion within 7 days, plus delete from Pastel logs. 5. For Google & Meta Reviewers - Data Deletion Callback Google Deletion URL (for OAuth consent screen): https://pastel-eg.com/data-deletion Meta Data Deletion Callback URL (for App Dashboard): https://pastel-eg.com/api/meta/data-deletion This endpoint receives signed POST from Meta when user removes app via Facebook. Implementation: POST /api/meta/data-deletion { signed_request } -> We parse user_id, delete all Meta tokens and associated media for that user_id, return JSON { url: "https://pastel-eg.com/data-deletion", confirmation_code: "DEL-XXXX" } as per Meta docs. Confirmation Code: Every deletion request gets unique code DEL-... sent via email for audit. 6. What Happens After Deletion? All personal data, tokens, media deleted from production DB and backups within 30 days (tokens within 24h) No recovery possible after 7 days Legal invoices anonymized (no name/phone, only amount/date for tax) Google/Meta tokens revoked immediately via their revoke APIs 7. Contact for Deletion Issues Email: info@pastel-eg.com | WhatsApp: +20 10 22743790 We respond within 48 hours.