Legal

Data Deletion

Effective date: May 2026  ·  LYALIN CO. LTD

Vonch is committed to honouring your right to erasure under GDPR and applicable privacy laws. This page explains exactly what we can delete, what we cannot delete, and how to submit a request.

How to Request Deletion

Send an email to:

[email protected]

Subject line: Data Deletion Request

Include: your name or email address associated with the account, and whether you are a buyer or a merchant.

We will acknowledge your request within 72 hours and complete deletion within 30 days as required by GDPR Article 17.

What Gets Deleted

Upon a valid deletion request, the following actions are taken within 30 days:

  • ✓Email address — nulled in our Supabase database. The field is overwritten; the value is not recoverable.
  • ✓Name / display name — nulled in our Supabase database.
  • ✓DID key — your decentralized identity key is rotated in our Ceramic layer, breaking the link between your wallet address and any stored profile data.
  • ✓Order metadata — order IDs and product references linked to your identity are deleted from our database.

What Cannot Be Deleted

On-chain attestation records

Review attestations that have already been written to the blockchain are permanent and immutable — this is a fundamental property of distributed ledger technology and cannot be reversed by Vonch or any party.

Critically, these records contain only your pseudonymous wallet address and a cryptographic hash of your review text. No email address, name, or other personally identifiable information is ever written to the blockchain. Under GDPR Recital 26, a pseudonymous identifier that cannot reasonably be linked back to an individual without disproportionate effort does not constitute personal data. Therefore, the right to erasure does not apply to these on-chain records.

For Merchants

Merchants wishing to delete their Vonch account and all associated store data may submit the same request to [email protected] with subject Data Deletion Request. Please include your Shopify store URL to help us locate your account. All merchant profile data, API keys, and order records stored in our database will be deleted within 30 days.

Response Timeline

72h

Acknowledgement

30d

Completion

0

Cost to you

Contact

LYALIN CO. LTD
[email protected]