Data Deletion Policy

Effective date: June 19, 2026

You have the right to request that we delete the personal data we hold about you. This policy explains what data can be deleted, how to make a request, what we retain after deletion, and the legal exceptions that may apply.

This policy should be read alongside our Privacy Policy, which describes all personal data we collect and how we use it.

The following personal data is stored in our systems and can be deleted at your request, subject to the legal retention exceptions described below:

• Your name: The buyer name provided at checkout, stored in our license records.
• Your email address: The purchase email address used to deliver your license key and to respond to support inquiries.
• Your license key: The plaintext license key generated for your purchase.
• Email delivery logs: Records of whether your license confirmation email was delivered, the delivery timestamp, and any delivery error messages.

We do not store your IP address, payment card details, or PayPal credentials. Those are either transient (IP addresses, used only for rate limiting) or processed exclusively by PayPal.

Even after we fulfill a deletion request, we are required or permitted by law to retain certain information:

• Transaction and financial records: PayPal transaction IDs, order IDs, payment amounts, currency, payment status, and the associated extension and purchase date. These are required for tax accounting, financial reporting, and to comply with applicable record-keeping obligations. We retain these records for a minimum of 7 years.
• Chargeback and dispute records: If a dispute, refund, or chargeback is pending or was initiated, we retain the relevant records until the dispute is fully resolved.
• License key hash: The HMAC-SHA256 hash of your license key may be retained to prevent future reactivation after deletion. The hash alone cannot be reversed to recover your license key.
• Fraud prevention records: Where we have a legitimate interest in retaining minimal identifying information to prevent future abuse, we may retain an anonymized or hashed record.

Where possible, we will pseudonymize or anonymize records rather than retaining full personal data — for example, by replacing your name and email with a placeholder while retaining the transaction reference.

Deleting your personal data will result in the deactivation of your associated license key. Once your data is deleted:

• Your license key will no longer validate successfully in any Chrome extension.
• We will not be able to recover your license key or issue a replacement, because the name and email required to verify your identity will have been deleted.
• If you wish to continue using the Pro features, you would need to purchase a new license.

Data deletion is not a substitute for a refund. If you are requesting deletion because you are dissatisfied with a purchase, please contact us about a refund first — see our Refund Policy.

To submit a data deletion request, email us at support@extensions.fityra.app with the subject line "Data Deletion Request". Please include:

• The email address you used at checkout (so we can locate your records and verify your identity).
• Your purchase reference number, if available (the short uppercase code in your license confirmation email).
• A statement that you are requesting deletion of your personal data.

We may ask you to verify your identity before processing the request — for example, by confirming a detail from your purchase that only you would know.

We will acknowledge your deletion request within 5 business days. We aim to complete all deletion requests within 30 days of the date we verify your identity. If we need additional time due to complexity or volume, we will notify you and explain the reason.

If you are in the EU or UK, you have the right to receive a response within 30 days under GDPR. If you are in California, you have the right to receive a response within 45 days under CCPA.

When we delete your data from our systems, we will instruct our data processors to delete it from their systems as well:

• Supabase: Your records will be deleted from the license orders table, subject to any anonymized transaction records we are required to retain.
• Resend:Resend's own data retention policies apply to emails already delivered. Delivered emails cannot be recalled. We will request deletion of any retained contact data from Resend.

PayPal is an independent data controller for the personal information you submitted to their payment interface. PayPal retains your transaction history under their own legal obligations. To request deletion from PayPal, contact PayPal directly.

If you are unsatisfied with how we have handled your deletion request, you have the right to lodge a complaint with your local data-protection authority:

• EU residents: Contact your national data protection authority (e.g., the CNIL in France, the BfDI in Germany).
• UK residents:Contact the Information Commissioner's Office (ICO) at ico.org.uk.
• California residents: Contact the California Privacy Protection Agency (CPPA).

For deletion requests or questions about this policy:

• Company: Fityra, trading as Chrome Extension Hub
• Address: Philippines
• Email: support@extensions.fityra.app