PaidFast Data Deletion

Last updated: 4 August 2026

1. Introduction

PaidFast is a product of ProductSuch Limited ("ProductSuch", "PaidFast", "we", "us", or "our"). This page explains how to request deletion of the personal data we hold, what happens when you do, and how long it takes. It supplements Section 6 (Data Retention) and Section 8 (Your Rights) of our Privacy Policy.

We honour deletion requests from both:

• Account holders — businesses and their users who registered for PaidFast; and
• Portal users / end customers — people who received invoices, reminders, receipts, or payment links from a PaidFast account holder.

Our two roles. For an account holder's own account data, ProductSuch Limited is the data controller and will action your request directly. For the customer records a business uploads about the people it invoices (their names, phone numbers, and amounts owed), that business is the data controller and PaidFast acts as its data processor. If you are an end customer asking us to delete data that a business holds about you, we will forward your request to that business and assist them in responding.

2. How to Request Deletion

You can request deletion of your data in either of the following ways.

2.1 In the app (account holders)

1. Sign in to PaidFast.
2. Open Organization settings → Account & access.
3. Choose Request account deletion and confirm.

This submits a deletion request for your organization and its associated data. We may contact you to confirm your identity before processing.

2.2 By email (anyone)

Send a deletion request to info@productsuch.com from the email address associated with your request, with the subject line "Data Deletion Request". Please include:

• your full name;
• the email address and/or phone number linked to the data;
• if you are an end customer, the name of the business that invoices you through PaidFast; and
• a short description of what you would like deleted.

We may ask for additional information to verify your identity before we act, so that we do not disclose or delete data on the instruction of the wrong person.

3. What Gets Deleted

Once a request is verified, we delete or irreversibly anonymize the personal data we hold about you, including (as applicable):

• account and profile data (name, email, hashed password, profile image);
• organization and configuration data;
• customer records, invoices, quotations, statements, receipts, and communication logs tied to your account;
• security tokens and one-time passcodes (these already expire automatically).

4. What We May Retain

We cannot always delete everything immediately. As explained in our Privacy Policy, we may retain limited data where the law requires it or to establish or defend legal claims, including:

• Invoices, payments, and receipts — retained for the period required by tax and accounting laws in the relevant market (commonly 5–7 years), even after account closure;
• Records needed to comply with legal, tax, or regulatory obligations; and
• Limited security and audit logs retained for a short period, then deleted or anonymized.

Data retained for these reasons is kept only for as long as necessary and is then deleted or anonymized.

5. Timeframe

We aim to acknowledge deletion requests within 7 days and to complete verified requests within 30 days, unless a longer period is permitted or required by law. If we need more time, we will let you know.

6. Contact Us

For deletion requests or questions about this page, contact:

ProductSuch Limited (trading as PaidFast) A company registered in Kenya Registered address: Nairobi, Kenya Email: info@productsuch.com

If you are in Kenya, you may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC). If you are in another country, you may have the right to lodge a complaint with your local data protection authority.