Data Deletion Policy

1. Who this policy applies to

This policy covers the personal data that Kunfu Global, Inc. processes as controller through kunfupay.com, the KunfuApp tools, our forms, our support channels and our integrations with third-party platforms. It applies to:

• Website visitors and people who have submitted any of our forms.
• Registered users of Kunfupay and of the KunfuApp tools.
• People who connected with us through a third-party platform, such as Facebook or Instagram.
• Newsletter subscribers and people who have written to our support channels.

2. Data we may hold about you

Depending on how you have interacted with us, we may process the following categories of information:

• Identifiers: name, email address, phone number and country.
• Account data: internal user identifier, preferences and language.
• Connected-platform data: when you connect a Facebook or Instagram account, your profile's public identifier, your public name and the access token that lets us operate the connection. We do not store your Meta password.
• Communication content: messages sent through contact forms, conversations with our assistant and support tickets.
• Technical and usage data: IP address, device, browser, pages visited and analytics events.
• Commercial data: products or services you have purchased or considered, and their history.

3. How to request the deletion of your data

Choose whichever channel suits you best. All of them have the same effect: we open a deletion request in your name and handle it under the same timeframes.

Option A · By email (recommended)

Write to contacto@kunfupay.com with the subject “Data deletion” and from the same email address you used to register with Kunfupay. This requirement allows us to verify that the request comes from the account holder. Also include:

1. The phone number linked to your account, if you registered one, so we can find it faster.
2. If you connected with Facebook or Instagram, the identifier or username of that account, if you know it.
3. Whether you want all of your information deleted or only a specific part (for example, just the newsletter subscription).

Option B · Through the contact form

Send your request from kunfupay.com/contact, stating in the message that it is a data deletion request. It will be handled exactly as an email request.

Contact

Option C · From your account

If you have an account in the KunfuApp tools, you can request deletion from the support chat inside the application while logged in. Because you are already identified, no additional verification is needed and the process is faster.

4. If you logged in with or connected a Facebook or Instagram account

In that case there are two separate, complementary steps. The first one is to revoke the app's access from your own Meta account:

1. Open Facebook and go to Settings & privacy › Settings.
2. Go to the Apps and websites section.
3. Find Kunfupay in the list of apps with active access.
4. Select it and press Remove to revoke access. On Instagram, the equivalent path is Settings › Apps and websites.

Revoking access stops us from receiving new data from Meta, but it does not by itself delete the information we already store. To have it deleted, also send us a request through any of the channels in section 3.

5. What we delete

Once we have verified and confirmed a request, we irreversibly delete or anonymise:

• Your account and your user identifiers in our systems.
• The contact and identification data associated with your profile.
• The tokens and credentials of any third-party platforms you had connected, including Meta's.
• The content of your conversations with our assistant and your support history.
• Your subscription to commercial communications and the analytics data linked to your profile.

Deletion applies to our production systems and to our backups, and is completed within a maximum of 90 days. We also pass the instruction on to the providers that process data on our behalf.

6. What we must retain, and why

In some cases the law requires us to retain certain information, in blocked form, even after you have requested its deletion. This data remains blocked and is not used for any other purpose:

• Records required by accounting, tax and invoicing obligations, for up to 10 years.
• Information needed to comply with anti-money-laundering and counter-terrorist-financing obligations, typically 5 years from the end of the relationship.
• Data needed to defend against claims or to respond to requests from competent authorities.
• Technical records for security and fraud prevention.
• Aggregated or anonymised data that no longer identifies you.

As a general rule, and aside from these exceptions, we retain personal information for up to 24 months from your last interaction, as detailed in our Privacy Policy.

7. Response times

We commit to the following timeframes from the moment we receive your request:

• Acknowledgement: we confirm receipt with a reference number within 72 hours at most.
• Resolution: within a maximum of 30 calendar days, in accordance with Article 12.3 of the GDPR.
• Effective deletion: removal from our systems and backups is completed within a maximum of 90 days.
• Confirmation: we send you written confirmation once the deletion has been completed.

8. Identity verification

Before carrying out a deletion we verify that the request comes from the data subject or their authorised representative. That is why we ask you to send the email from the address you registered with; if that is not possible, we will ask you for additional information that only you could know.

We will never ask for passwords or identity documents by email. If you receive a message claiming to be from us and asking for them, do not reply and let us know.

9. Consequences of deletion

Before going ahead, please bear in mind that:

• Deletion is final: once carried out, we cannot recover the data or the history.
• You will lose access to your account and to the associated tools.
• Any services that depend on that information will stop working.
• If you register again later, you will start from scratch, with no previous history.

10. Data held by our partners

Kunfupay is a financial technology company, not a financial institution or a bank, and it does not hold third-party funds: payment services, accounts and card issuing are provided by licensed financial partners.

Where part of your information sits in one of those partners' systems, we will forward your request and tell you with whom you need to continue the process. Financial regulation may require them to retain certain records for legally established periods, regardless of the action we take.

11. Other rights over your data

Deletion is one of the rights you have over your personal information. You can also request access, rectification, portability, restriction of or objection to processing, and withdraw any consent you have given. These rights and how to exercise them are described in detail in our Privacy Policy.

Privacy

12. Contact

For any question about this policy or the status of a request, use the following contact details: