User data deletion

Last updated: July 24, 2026

1. Your data deletion rights

Under the Privacy Act 2075 (2018) and the Data Act 2079 (2022) of Nepal, you have the right to request deletion of your personal data held by Bharosilo. This page explains what data we hold, how to request deletion, and what happens after your request.

The Constitution of Nepal 2015 (Article 28) guarantees your right to privacy, and we are committed to respecting that right.

2. How to delete your account

The easiest way to delete your account and data is through your account settings:

Log in to your Bharosilo account.
Go to Settings > Account.
Scroll to the Delete account section.
Type "DELETE" to confirm and submit.

Account deletion is rate-limited to 2 attempts per 24 hours for security. Once confirmed, the deletion process begins immediately.

3. What is deleted immediately

When you delete your account, the following data is permanently removed:

Your account profile (name, email, username, password hash, profile picture).
All active sessions (you are logged out of all devices).
Saved places and favorites.
Notification preferences and notification history.
Account-linked settings and preferences.
Pending claims and moderation appeals.
Linked social accounts (Google, Facebook, Discord).

4. What is anonymized (not deleted)

Some content you contributed to the platform is kept to preserve the integrity of reviews and listings. This content is anonymized — your username and profile are replaced with a "deleted user" label:

Reviews you wrote — remain visible but author becomes "deleted user".
Ratings you submitted — remain visible but disassociated from your identity.
Owner replies — remain visible but disassociated from your identity.
Review votes (helpful/not helpful) — aggregated data retained, personal association removed.
Photos you uploaded to listings — remain on listings but attribution is removed.

Anonymization ensures that the community's reviews and ratings remain useful while your personal identity is removed. We retain anonymized data under our legitimate interest in maintaining platform integrity, as permitted by the Privacy Act 2075.

5. What is retained and why

Certain data is retained for legal, security, and abuse-prevention purposes, even after account deletion:

Security event records: IP addresses and device fingerprints related to abuse prevention are retained in encrypted form. The raw encrypted IP is removed after 30 days. Hashes and counters may be retained longer for correlation and audit. This is necessary for platform security under the Electronic Transactions Act 2063.
Audit logs: Administrative actions and moderation events involving your account may be retained as required by applicable law.
Abuse reports: Reports you submitted or that were submitted about you may be retained in anonymized form for moderation records.
Legal holds: If your account is subject to a legal investigation, court order, or government request, relevant data may be preserved until the legal matter is resolved.

Retained data is processed under our legal obligations under the laws of Nepal and our legitimate interest in platform security.

6. If you cannot access your account

If you cannot log in to your account to request deletion (e.g., lost access, forgotten password, or account compromise), you can request deletion by:

Sending an email to [email protected] from the email address associated with your account.
Including the subject line "Data deletion request" in your email.
Providing enough detail for us to verify your identity and locate your account.

We may ask for additional information to verify your identity before processing the request, as required by the Privacy Act 2075.

7. Response timeline

We will respond to your data deletion request within 30 days as required by the Privacy Act 2075 of Nepal. If the request is complex or we need additional time, we will inform you of the extension and the reason.

8. Other rights

In addition to deletion, you have the following rights under Nepal's Privacy Act 2075:

Right to access: Request a copy of the data we hold about you.
Right to correction: Request correction of inaccurate data.
Right to object: Object to certain types of processing.
Right to data portability: Request your data in a portable format.

To exercise any of these rights, visit your account settings or contact us. See our Privacy Policy for more details.

9. Contact

If you have questions about data deletion or need help, contact us through the contact page or at [email protected]. Include enough detail for us to find your account.