Data Deletion Request

You can ask Vellumarc to delete the personal data we hold about you. This page explains how to send the request, what information we need, how long we take to respond, and the limited cases where law requires us to retain data after a deletion request.

Send an email to contact@vellumarc.com with the subject line:

Data Deletion Request

Please include the following details so we can locate your records:

• The email address associated with your account
• Your organization or school name
• The phone number associated with the account (if applicable)
• A short description of what you want deleted (entire account, specific records, guardian phone numbers, etc.)

We may ask for additional verification to confirm your identity before acting on the request, so we don't accidentally delete data on behalf of someone who isn't you.

• Acknowledgement within 7 days — we will confirm receipt of your request and any additional information needed
• Completion within 30 days — we will delete or anonymize the relevant personal data and confirm in writing once the deletion is complete

When we process a deletion request we typically remove or anonymize:

• Your account profile (name, email, phone, role)
• Authentication credentials and session tokens
• Audit log entries that identify you personally
• Marketing and contact-form submissions linked to your email
• WhatsApp message logs once the retention window ends

Some data must be kept even after a deletion request. We retain only what the law requires and only for as long as required.

• Financial records — payment receipts, invoices, and tax records are retained for 8 years to comply with the Income-tax Act, Companies Act, and GST Act
• Backups — encrypted backups roll off automatically within 90 days
• Records under legal hold — data subject to a court order, regulatory investigation, or pending dispute

Retained data is access-restricted and used only for the purpose that requires it.

The school is the data fiduciary / controller for student and guardian data inside Campus. If you are a parent, guardian, or student asking for data held by a school, please contact the school directly first — they manage their own deletion process and they hold your account inside their Campus workspace.

If the school does not respond within a reasonable time, email us at contact@vellumarc.com and we will work with the school to ensure your request is honored in line with the DPDP Act 2023.

• Privacy Policy — full detail on what data we collect and how we use it
• Terms of Service — the agreement governing your use of the service