Data Deletion Policy

Overview

At Yellah Bookkeeping & Taxes, we respect your privacy and your right to control your personal data. This Data Deletion Policy outlines how you can request the deletion of your data and what happens when we process your request.

Your Data Deletion Rights

You have the right to request deletion of your personal data under applicable privacy laws, including:

• General Data Protection Regulation (GDPR) – if you are located in the European Union
• California Consumer Privacy Act (CCPA) – if you are a California resident
• Other state privacy laws – additional protections may apply based on your location

Types of Data We Collect

The personal data we collect may include:

• Profile information (name, email, business name, contact details)
• Financial data (bank account information, transaction records, tax returns)
• Business information (entity type, industry, business goals)
• Communication records (emails, support tickets, messages)
• Usage data (login activity, portal access logs)
• Document uploads (receipts, invoices, statements)

How to Request Data Deletion

Step 1: Submit Your Request

To request deletion of your data, please email us at:

In your request, please include:

• Your full name and email address associated with your account
• A clear statement that you request deletion of your personal data
• Any specific data categories you want deleted (or request full deletion)

Step 2: Verification

We will verify your identity and account ownership before processing any deletion request. This may include:

• Confirming your email address
• Verifying account credentials
• Requesting additional identification if necessary

Step 3: Processing Your Request

Once verified, we will process your deletion request. The timeline and scope depend on several factors:

• Account Data Deletion: Profile and account settings deleted within 30 days
• Financial Records: May be retained for legal/tax compliance purposes (see "Legal Obligations" section)
• Communication Records: Deleted upon request unless required for legal reasons
• Backup Copies: May take up to 90 days to remove from backup systems

Data We May Retain

Even after a deletion request, we may retain certain data for legitimate business and legal reasons:

Legal & Tax Compliance

We may retain financial records, tax returns, and transaction data when required by:

• Tax authorities (IRS, state tax agencies)
• Financial regulations (Bank Secrecy Act, anti-money laundering laws)
• Legal obligations and court orders
• Audit trails and compliance records

Legitimate Business Purposes

We may retain anonymized or aggregated data for:

• Service improvement and analytics
• Fraud detection and security
• Dispute resolution and customer support

Data Deletion Limitations

The following situations may prevent immediate data deletion:

• Ongoing Services: If you have active services, we may retain data until service termination
• Pending Transactions: Financial data may be retained until all transactions are settled
• Legal Holds: Data subject to litigation or investigation cannot be deleted
• Contractual Obligations: Data needed to fulfill service agreements will be retained
• System Backups: Deletion from live systems does not immediately remove data from backups

What Happens to Your Account

When you request full data deletion:

• Your account will be deactivated immediately
• Your access to the client portal will be terminated
• Your stored documents and files will be deleted (except where legally required to retain)
• You will no longer receive communications from us (except as required by law)
• You will not be able to recover deleted data after processing is complete

Exceptions & Special Circumstances

Active Tax or Accounting Matters

If we are currently handling tax preparation, bookkeeping services, or ongoing accounting work, we may retain data until:

• Tax returns are filed and accepted by authorities
• Bookkeeping services are completed and reconciled
• All outstanding invoices and payments are settled

Bank Connections via Plaid

If you have connected your bank account through Plaid:

• We will disconnect your bank account from our systems
• Stored banking credentials and tokens will be permanently deleted
• Transaction history may be retained for accounting purposes (check with your service terms)
• You may need to revoke access directly in your bank's settings

Response Timeline

We aim to respond to data deletion requests as follows:

• Initial Response: Within 10 business days of receiving your request
• Verification: Verification process typically takes 5-10 business days
• Data Deletion: Completion within 30 days of verification (or as required by law)
• Backup Removal: Complete removal from backups within 90 days

Contacting Us About Data Deletion

For questions or to submit a data deletion request:

Your Rights

In addition to data deletion, you may also have the right to:

• Right to Access: Request a copy of your personal data
• Right to Correction: Update or correct inaccurate data
• Right to Portability: Receive your data in a portable format
• Right to Object: Opt out of certain data processing activities
• Right to Restrict Processing: Limit how your data is used

Policy Updates

We may update this Data Deletion Policy periodically. We will notify you of any material changes via email or by updating the "Last Updated" date below. Your continued use of our services constitutes your acceptance of the updated policy.

Legal Compliance

This policy is designed to comply with:

• GDPR (EU General Data Protection Regulation)
• CCPA (California Consumer Privacy Act)
• CPRA (California Privacy Rights Act)
• Other applicable state and federal privacy laws