Back to Home

    Data Deletion & Retention Policy

    Effective Date: January 13, 2026

    At Trapy, we manage your data with the same transparency we use to build our community. This policy explains how long we keep your information, the deletion process, and how we protect your privacy.

    1. Account Deletion Process

    How to Request

    • Mobile App: Profile > Settings > Delete My Account
    • Website: Account Settings > Privacy > Delete My Account
    • Email: privacy@trapy.com

    1.2 The 30-Day Timeline

    Phase 1: Immediate (24 hours)

    Profile becomes invisible. New bookings disabled. Active trips cancelled.

    Phase 2: Grace Period (Days 0-14)

    You can restore your account simply by logging in. Deletion stops immediately.

    Phase 3: Permanent Deletion (Days 15-30)

    Data removal begins. Reactivation is no longer possible. By Day 30, all personal data is permanently wiped.

    Active Trip Warning

    If you have a trip scheduled within 48 hours, deletion may be delayed until trip completion to ensure passenger safety. Pending payments will be processed before final deletion.

    2. Data Retention Schedule

    We do not keep data longer than necessary. Our retention periods are based on legal requirements and safety protocols.

    Data CategoryRetention PeriodReason
    Standard Account Data30 days after closureProcessing period & grace period
    Financial & Tax Records10 YearsLegal obligation for tax compliance
    Live Location Data7 DaysShort-term safety verification
    SOS/Emergency Data7 YearsLegal claims & safety investigations
    Detailed Route Data90 DaysOperational purposes
    ID Verification Docs2 YearsFraud prevention & KYC compliance
    Suspended Accounts2-10 YearsDepending on violation severity

    *After 5 years of inactivity, accounts are automatically closed following multiple notifications.

    3. Technical Security Protocol

    1. Immediate Production Removal (Day 0-1): PII flagged, profile hidden, sessions terminated.
    2. Soft Deletion (Days 1-14): Data hidden but recoverable by admins only.
    3. Hard Deletion (Days 15-30): PII overwritten with random values. Search indexes purged. Content anonymized (reviews show "Deleted User").
    4. Backup Purging (Days 30-90): Data removed from encrypted rolling backups.
    5. Archival: Only legally required data (tax/safety) moves to isolated, encrypted cold storage.
    6. Third-Party Propagation: Deletion requests sent to processors (Stripe, AWS, etc.).

    4. Exceptions & Third Parties

    Data We Cannot Delete

    • Financial transaction records (Tax law)
    • Identity verification docs (AML regulations)
    • Safety incident reports (Legal holds)
    • Anonymized aggregate statistics
    • Reviews written about you (Anonymized)

    Third-Party Processors

    We notify our partners to delete your data:

    • Payments: Stripe, Razorpay (Retained for fraud prevention)
    • ID Checks: Onfido, Jumio (2-year retention)
    • Cloud: AWS, Google Cloud (90-day cycle)

    5. Your Data Rights

    Under GDPR, CCPA, and DPDP laws, you have the right to:

    • Access: Request a full copy of your data (JSON/CSV).
    • Rectification: Correct inaccurate information.
    • Deletion: The "Right to be Forgotten".
    • Portability: Move your data to another service.
    • Restriction: Pause processing during disputes.
    • Objection: Opt-out of marketing or automated profiling.
    • Withdraw Consent: For optional features (analytics).

    6. Contact Information

    Data Privacy Requests

    Email: privacy@trapy.com

    Response time: 3 business days

    Safety Team

    Email: safety@trapy.com

    Available 24/7 for emergencies

    Need to Close Your Account?

    Please sign in to request deletion via settings, or contact privacy support directly.

    Sign InContact Privacy Team