Data Deletion

This page explains how to have personal data deleted from Paysana, and what happens when you ask. It sits alongside our Privacy Policy, which describes what we collect and why.

Paysana is operated by Meetcyberjob Network (CA0406723-K). Requests under this page are handled by that entity, at hello@paysana.co.

It does not cover the separate records a merchant keeps in their own systems, or the records held by the payment gateway, courier, accounting or marketing providers a merchant has connected. Those are governed by each of those parties' own policies.

Who holds your data decides who can delete it, so start by finding yourself below.

You sell with Paysana

We are the controller of your account data, so ask us directly. Deleting your account also removes the products, storefront, customer records and marketing history inside it.

You bought from a business using Paysana

That business is the controller of your data; we only process it on their behalf. Ask them first — their contact details are on your receipt and on their storefront. If you cannot reach them, write to us and we will pass the request on and follow it up.

You are an affiliate

We are the controller of your affiliate login, so ask us. Your profile, tracking links, bonus offers and payout details are removed.

Email help@paysana.co with the subject "Data deletion". Write from the email address on the account where you can — it is the fastest way for us to confirm the request is genuinely yours.

Please include:

• Your name, and the email address the data is held under.
• Whether you are writing as a merchant, a buyer or an affiliate.
• If you are a buyer: the business you bought from, and an order reference if you have one.
• Anything specific you want removed, if it is not the whole account.

You do not have to give a reason, and you will not be asked to justify the request or sit through a retention offer. There is no charge.

Before deleting anything we confirm the request came from the person the data belongs to. Usually that means replying from the address on the account is enough; occasionally we may ask one further question that only the account holder could answer.

This step exists to protect you. Without it, anyone who knew your email address could erase your business records.

We acknowledge every request when it arrives and aim to complete it within 30 days, which is the timeframe most data-protection laws set. If a request is unusually complex we will tell you before that deadline and explain what is holding it up.

When it is done we write back to confirm what was removed and, where anything was retained, exactly what and why.

Removed from live systems, and from backups as those age out on their normal cycle:

• Your account details — name, business name, email, phone, address and password.
• Credentials you stored: payment gateway and integration keys, API keys, two-factor secrets and recovery codes.
• Your products, landing pages, storefront content, uploaded images and digital files.
• Customer records, marketing lists, campaign history and scheduled follow-ups.
• Personal details of buyers on your orders — names, contact details and delivery addresses are removed or anonymised.
• Support tickets, notification logs and any verification documents you submitted.

A short list, each item retained because a law requires it rather than because we want it. Personal details on these records are reduced to the minimum the obligation calls for.

Financial records

Invoices, receipts, plan charges and ledger entries, kept for the period tax and accounting rules require — typically several years after the transaction.

Records held by your own providers

Buyer payments settle into the gateway account you connected, so that provider holds its own records. The same applies to any courier, accounting or email-marketing platform you connected. Ask each of them directly; we cannot delete data on their systems.

Security records

Where an account was closed for fraud, abuse or a legal reason, a minimal note is retained so the same account cannot simply be recreated.

Aggregate figures

Counts and totals that carry no personal data and cannot be traced back to an individual.

Deletion is permanent and cannot be undone. If you sell with Paysana, closing your account also:

• Ends your subscription and stops future renewals. Outstanding fees, including accrued transaction fees, remain payable.
• Takes your checkout pages, landing pages and storefront offline, and breaks every payment link you have shared.
• Stops buyer receipts, download links and event tickets from working.
• Removes your team members' access along with your own.
• Forfeits any unused credits, which are not refundable.

The merchant you bought from decides what data is collected and how long it is kept — they are the controller, and we process it for them. Contact them first; their email address is on your receipt and their storefront.

If they do not respond, write to us and we will pass your request to them and follow it up. Where a merchant has enabled it, you can also look up your own orders on their storefront using your order reference and email address.

One thing to expect: the merchant may be required to keep the invoice or receipt for your purchase as a financial record even after removing your contact details, for the same tax reasons described above.

If part of a request cannot be actioned, we tell you which part and which obligation prevents it, rather than quietly doing less than you asked. You can challenge that decision by replying to us, and you may also complain to your local data-protection authority.

Send deletion requests and any questions about this page to help@paysana.co. A person reads them.