Data Deletion Instructions

1. Delete your account from inside Palflip

If you can still sign in, this is the fastest route and it takes effect immediately — there is nothing to wait for and no request to submit.

·Sign in and open Settings.

·Go to Account.

·Choose Close account.

·Type your account email address exactly, to confirm. We ask for this so an account cannot be closed by someone using an unattended device.

Download your data first if you want it. The same Account screen offers a full export of everything we hold about your account, at any time and without asking us. Once the account is closed the export is no longer available, because the information it would contain has been erased.

2. If you cannot sign in

Email support@palflip.com from the email address on the account and ask us to delete it. Say that you are requesting deletion under POPIA so it is routed correctly.

We may need to verify your identity before acting, since deletion is irreversible and we have no way to undo it for the wrong person. We will respond within 30 days.

3. What is erased

Closing your account erases the personal information on it immediately. That includes:

·Your sign-in identity. The account is deleted at our authentication provider, so it can no longer be used to sign in anywhere on Palflip.

·Your name, username, email address, profile photo, bio, and contact email and phone number.

·Your linked TikTok, Instagram and YouTube handles, and the follower counts recorded against them.

·Any TikTok, Instagram or YouTube account you connected to Palflip, including the access we were granted to verify your own posts and videos. The stored credentials are deleted outright, not anonymised, when your account closes.

·Your banking details — account holder name, bank, branch code and the stored last four digits — and your payout recipient record at our payment provider, which is deleted there as well.

·Company details for brand accounts: company name, registered name, registration number, VAT number and billing address.

·Your saved preferences, notification settings, push notification subscriptions, in-app notifications, and any unfinished onboarding answers.

Your username is retired rather than released. We keep a record that the name is taken, with no link to you, so that it is never reassigned to someone else who could then be mistaken for you.

4. What we keep, and why we cannot delete it

Some records cannot be destroyed on request, because the law requires us to keep them and because other people have a stake in them. These are kept in anonymised form — they no longer carry your name, contact details or banking information, and are not linked to an identifiable person.

·Financial and tax records. Payments in, payouts out, fees and refunds. South African tax and company law requires us to be able to produce these.

·Campaign and submission records. A brand paid for work that was delivered, and a campaign's spend and results have to remain coherent after any one participant leaves.

·Dispute and enforcement records. Where a dispute, chargeback or enforcement action is open or may still arise.

We keep these records for five (5) years, after which they are deleted. Where a dispute, investigation or legal claim is still running at the end of that period, the records involved are kept until it concludes and are then deleted.

5. Deleting data we received from TikTok, Instagram or YouTube

If you connected a social account so we could verify views on your clips, the information we received from that platform — your handle, follower count and the view figures for clips you submitted — is covered by everything above and is erased or anonymised in the same way.

You can disconnect a TikTok, Instagram or YouTube account at any time from Settings without closing your Palflip account. Doing so deletes the access we hold immediately; clips already submitted from it keep the view counts already recorded, and stop updating.

Removing Palflip's access at the platform itself stops any further data reaching us, but does not delete what we already hold. Use the steps in section 1 or 2 for that.

6. Timing

·Immediately — closing the account erases the personal information in section 3 and ends access.

·Within 30 days — for requests made by email, once we have verified who you are.

·After five (5) years — the anonymised records in section 4 are deleted.

7. Questions and complaints

Email support@palflip.com. If you are not satisfied with how we have handled your request, you may complain to the Information Regulator of South Africa.