Deleting an account and erasing data

Most deletion pages assume there is one kind of user. This platform has three, the route is different for each, and picking the wrong one is the usual reason a request goes nowhere. Find yourself here and jump to your section.

A rental company

You or your business holds the account. You signed up, you pay for it, and your vehicles and bookings are in it. Section 2.

A staff member

You sign into the mobile app or the console with a phone number and a PIN, on a device your employer paired. You did not sign yourself up. Section 3.

Someone who rented a vehicle

You never had an account and never chose a password — but a rental company holds your name, your phone number, probably a fingerprint of your identity document, and your booking history. Section 4.

The OWNER of the company account can ask for the whole account to be deleted. That request has to come from the owner, at the address the account is registered to — a request to erase an entire business book of records is exactly the one that must never be honoured on trust, and a staff member, a competitor or a disgruntled ex-employee asking for it will be told no.

Deleting the account removes the company record and everything hanging off it: staff accounts and their paired devices, vehicles, bookings, handovers, customer records, the fingerprints of identity numbers, and the photographs and documents in storage.

Financial records and the audit archive are the exception and are kept for the period set out in the privacy policy — as long as you must keep business records under Bangladeshi tax law, which we treat as six years unless you tell us the period that applies to your registration. That is not us keeping your data for our own use; it is the bookkeeping you are separately obliged to be able to produce.

Staff accounts are CREATED BY THE COMPANY OWNER, not self-registered in the app. There is no sign-up screen: an owner adds a person in the console, pairs their device, and that is how the account comes to exist.

So removing one is the owner action. The owner deactivates or removes the staff member in the console, which ends that person access immediately and revokes the refresh token on every device they were paired on. If you are a staff member who wants your account removed, ask your employer first — they can do it in a few seconds and we cannot do it faster.

This is the employer-provisioned account case that the App Store account-deletion guideline carves out. That guideline requires an in-app deletion path for accounts a person creates in the app; where accounts are provisioned for someone by their employer, it allows the app to direct them to their administrator or to a support contact instead. Nobody creates an account inside this app, so that is the position here.

If your employer will not act, write to us. We will take it up with the company, and where the law requires us to act on your personal information directly, we will — your employment relationship does not remove your rights under the Personal Data Protection Act 2023.

You never had an account, so there is nothing to close. What exists is a record the rental company created about you: your name and phone number, a one-way fingerprint of your national identity or licence number, your bookings and payment history, and possibly photographs from a handover. The number itself was never stored, and a photograph of your identity document is deleted when your booking closes unless that company has barred you.

Section 16 of the Personal Data Protection Act 2023 gives you the right to have that erased. Send the request to the RENTAL COMPANY you booked with. They are the controller of your data — see the privacy policy — and they are also the only party that can tell it is really you asking, because they met you at the counter and we did not.

If the company does not respond, or tells you it does not know how, write to us. We will take it up with them and help them carry it out, and where the law requires us to act directly we will do so. Our first step is always to go through the company, and that is a protection for you: a platform that erased a customer record on the word of anyone who could send a message would be a platform where anyone could erase yours.

Bookings and payment entries you appear in are financial records of that company business and stay for the retention period described in section 6, the same as they would if the counter had written them in a paper ledger.

Deletion here means the records are gone from the live system, not hidden behind a flag.

Deleted

The company record; staff accounts and their paired devices; vehicles; bookings; handovers and their condition photographs; customer records with names and phone numbers; the fingerprints of identity and licence numbers; and the documents and images in storage under that company.

Kept — financial records

Bookings, payments, deposits and refunds, for as long as the company must keep business records under Bangladeshi tax law, treated as six years unless the company sets its own period. Excluded from a deletion request until that period ends.

Kept — the audit log

Not deleted. It records which staff account did what and when, and a record the person it describes can erase is not a record. It holds actions, not customer documents.

Kept — technical error reports

One row per distinct software fault with a count. These contain no personal information by construction, so there is nothing in them to erase.

Already gone before you ask

Photographs of identity documents are deleted when each booking closes at the return handover, unless the company has barred that rider. For most renters there is no identity photograph left to delete by the time they think to ask.

You do not have to close an account to have something removed. A company can keep trading and still ask for one customer records to be erased, for stored photographs to be cleared, or for a staff member who has left to be removed entirely. Say in the request which part you mean.

This is what a renter usually wants: your own information gone, with no interest in the rental company account, which is not yours to close in the first place.

A request can be withdrawn at any point before it is carried out — write again from the same address and say so. Because the work is done by a person on a written request rather than by a timer, there is a real window here, and it lasts until we act.

Once carried out, deletion is NOT reversible. The rows are gone and the stored files are gone, and we do not keep a shadow copy to restore from — a copy kept so that deletion could be undone would mean the data was never deleted. If you might want an export, take it BEFORE you send the request, not after.

Deleted records may persist for a short period in routine platform backups before those age out in the ordinary course. They are not returned to the live system and are not used for anything.