Data Deletion

Delete Your Account In The App

If you can sign in, the fastest path is Profile > Delete Account. The app will ask you to confirm before permanently deleting the account.

• Open the Common Grounds app or ordering website.
• Sign in to the account you want to delete.
• Go to Profile.
• Choose Delete Account and confirm the request.

Request Deletion Without Signing In

If you cannot sign in, contact privacy@commongroundsld.com or contact the store and include the email address or phone number tied to the account. We may need to verify your identity before changing or deleting account data.

What Happens After Deletion

• Your Supabase authentication account is deleted.
• Your profile record, favorites, and account preferences are removed where they are tied directly to the deleted account.
• If a Square customer record is linked to your account, we attempt to remove that Square customer record.
• Your local app session and cart data are cleared after deletion completes.

Information We May Retain

Some information may be retained when reasonably needed for receipts, refunds, taxes, chargebacks, fraud prevention, security investigations, legal compliance, backup integrity, or dispute resolution.

• Paid order records, receipt URLs, order totals, tax, tip, pickup status, and item history.
• Payment records returned by Square, such as payment IDs, status, amount, and receipt data.
• Security, rate-limit, abuse-prevention, and audit logs.
• Records Square or other providers must retain under their own legal, payment, tax, fraud-prevention, or compliance obligations.

Timing

In-app deletion is designed to start immediately. Requests that require identity verification, vendor follow-up, legal review, or support handling may take longer. We will handle requests within a reasonably prompt period and consistent with applicable law.

Access, Correction, and Export

You can also contact privacy@commongroundsld.com to request access, correction, export, or deletion of account data. We may ask for information needed to verify the request and protect the account from unauthorized disclosure or deletion.