Data Deletion

Effective Date: January 1, 2026

Also see: Privacy Policy · Terms of Service

At TogoPlato, operated by Tula Web Design LLC, you have the right to request deletion of your personal data. This page explains what data we can delete, what we are legally required to retain, and how to submit a deletion request.

This policy applies to all users of the TogoPlato platform: restaurant owners and customers alike. It also fulfills the data deletion callback requirement for connected third-party services such as Facebook/Meta.

1. Your Right to Delete

Under applicable privacy laws — including the California Consumer Privacy Act (CCPA) and, where applicable, the General Data Protection Regulation (GDPR) — you have the right to request the deletion of personal information we hold about you.

We will honor deletion requests within 30 days of verification, subject to the legal retention requirements described below.

2. What We Delete

Upon a verified deletion request, we will permanently delete or anonymize:

  • Your account profile (name, email address, hashed password)
  • Your contact and delivery address information
  • Your marketing preferences and communication history
  • Any profile information you provided (phone number, preferences)
  • Restaurant owners: Your restaurant's profile, menu, and location data, and your connected POS OAuth credentials

3. What We Are Required to Retain

Certain data must be retained for legal, financial, or security compliance reasons even after an account deletion request:

  • Order records — We retain transaction and order records for a minimum of 3 years for financial, tax, and legal compliance. Retained records are anonymized where possible (e.g., your name may be replaced with a reference ID).
  • Payment records — Stripe-processed payment records are retained as required by financial regulations (typically 7 years). Stripe may retain its own records independently per its own data policies.
  • Suppressed email addresses — Your email address may be retained on our suppression list to prevent accidental re-mailing after you have opted out or your address has hard-bounced. This is a CAN-SPAM best practice. The address is stored in a suppression-only context and is not used for any other purpose.
  • Security and fraud logs — Server and security logs may be retained for up to 90 days for fraud detection and security auditing, even after account deletion.
  • Legal holds — If your account or orders are subject to an active legal dispute, investigation, or regulatory inquiry, we may retain relevant data until the matter is resolved.

4. How to Submit a Deletion Request

You can request deletion of your data by any of the following methods:

Option A — Email Request

Send an email to support@togoplato.com with the subject line "Data Deletion Request" and include:

  • Your full name
  • The email address associated with your TogoPlato account
  • Whether you are a customer or restaurant owner
Option B — Contact Form

Use our Contact Form and select "Data Deletion Request" as the subject. Include your name and account email address in the message.

Option C — Account Settings (Registered Users)

If you are a registered user, you may request account deletion directly from your account settings page once logged in. The request will be reviewed and processed within 30 days.

5. Verification

To protect against unauthorized deletion requests, we will verify your identity before processing any deletion. Verification may include confirming your email address, order history, or other account details. We will not process a deletion request that we cannot verify.

6. Processing Timeline

  1. We will acknowledge your request within 5 business days.
  2. If we require additional verification, we will contact you within that window.
  3. Deletion will be completed within 30 days of verification.
  4. We will send you a confirmation email once the deletion is complete.
  5. Where data cannot be fully deleted due to legal retention requirements, we will notify you of what is retained and why.

7. Effect of Deletion

  • Your account will be permanently deactivated and you will lose access to all account features.
  • Any active restaurant subscription will be cancelled at the end of the current billing period. Prepaid subscription fees are non-refundable unless required by law.
  • Deletion is irreversible. If you wish to use TogoPlato again after deletion, you will need to create a new account.
  • Orders placed at restaurants on TogoPlato before deletion may still appear in the restaurant owner's records, as required for their business and legal compliance.

8. California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to request deletion, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising CCPA rights.

To submit a CCPA deletion request, use any of the methods in Section 4 above and note that your request is made under the CCPA.

9. Facebook / Meta Data Deletion

If you connected your Facebook account to TogoPlato and wish to remove all associated data, please submit a deletion request using one of the methods in Section 4 above. We will process your request in accordance with this policy and confirm deletion within 30 days.

10. Contact

For questions about data deletion or this policy:

Tula Web Design LLC — operating as TogoPlato
support@togoplato.com
Contact Form
Privacy Policy → Terms of Service →