Les textes. Sans jargon.

In accordance with Cameroonian Law No. 2010/012 of December 21, 2010 on cybersecurity and cybercrime, and with the requirements of third-party platforms (Meta/Facebook, Google, Apple), you may at any time request the deletion of your personal data and business data held by OpenInTech in connection with the Velko POS service.

This page describes the exact procedure, timelines, data deleted, and data we are required to retain under legal obligations.

Email procedure

Send an email to [email protected] with:

• Subject: `Data deletion`
• Body:

Identity verification

To protect your account from fraudulent deletion, we reply within 7 business days with a confirmation email. You must click the confirmation link or reply from the email address linked to the account.

In-app deletion (alternative)

If you are signed into Velko POS, you can also start the procedure from Settings → Account → Delete my account. The same email verification applies.

| Step | Timeline | |---|---| | Receipt and acknowledgment | within 7 business days | | Identity verification | 1 to 3 days after your confirmation | | Recovery period (export still possible) | 30 days | | Permanent deletion (production + backups) | within 60 days after the recovery period ends |

During the recovery period, your account is disabled but you can export your data (CSV/JSON) using Velko POS tools, in accordance with Section 19 of our Terms.

Deletion covers all personal and business data associated with your account:

Account data

• First name, last name, email, phone number
• Password (hash) and session tokens
• User preferences, language, timezone
• Profile picture

Store data

• Store information (name, address, logo, settings)
• Product catalog, categories, brands, attributes
• Stocks, stock movements, warehouses
• Saved customers and their history
• Employees, roles, and permissions
• Suppliers and drivers

Operational data

• Sales history and receipts
• AI chat messages and assistant history
• Support tickets created
• Activity and login logs

Third-party integration data

• OAuth tokens and identifiers (Meta/Facebook Ads, Google, etc.)
• Data imported from Meta Business Suite, Google Ads, or any other service connected to your account

Some data must legally be retained beyond account deletion:

• Subscription invoices and payment receipts for Velko POS: 10 years, in accordance with OHADA accounting obligations
• Security logs (intrusion attempts, abuse): 1 year, in accordance with Cameroonian cybersecurity law
• Anonymized data used for aggregate statistics: retained indefinitely, but no longer linked to your identity

This data is strictly isolated from your deleted personal data and is used solely to meet legal or regulatory obligations.

If you have connected Velko POS to a Meta/Facebook account (for example to manage advertising via the Meta Ads MCP), you may also:

• Revoke access from facebook.com → Settings → Apps and Websites
• This immediately cuts the connection between Meta and Velko POS
• To also erase data already collected on our side, follow the email procedure described in Section 2

At the end of the 60-day period following the recovery period, deleted data is permanently erased from our servers and all backups. This deletion is irreversible: it will not be possible to restore your account or your data.

If you change your mind during the 30-day recovery period, contact us: we can reactivate your account with no loss.

For any questions about deleting your data, or to exercise any other right over your data (access, rectification, portability), write to us:

OpenInTech SARL Yaoundé, Rond Point Damas, Cameroon Email: [email protected] Subject: "Data deletion" or "Data rights"

We commit to responding within 30 days, in accordance with Section 12 of our Terms of Use.