Request Account & Data Deletion

Data Safety Policy

What Happens When You Delete Your Account

We believe in total transparency regarding your personal data. Below is a detailed breakdown of how your information is handled upon submitting an account deletion request:

1. Data That Will Be Permanently Deleted

Within 24 to 72 business hours of verifying your deletion request, the following records are permanently erased from our production databases:

• Profile & Identity: Legal name, profile picture/avatar, username, and authentication credentials.
• Contact Information: Registered email address and mobile phone number.
• Authentication Tokens: Active Firebase Auth tokens, device session cookies, and API Sanctum bearer tokens.
• Notification Tokens: Google Firebase Cloud Messaging (FCM) and Expo Push tokens (ensuring you will receive no further push notifications).
• Security Credentials: Hashed login passwords, 4-digit transaction security PINs, and biometric associations.
• Identity Verification Records: Uploaded government ID photos, BVN/NIN verification verification caches.

2. Data Retained for Legal & Regulatory Compliance

Under Nigerian financial regulations, Central Bank of Nigeria (CBN) AML/CFT rules, and the Money Laundering (Prevention and Prohibition) Act, financial technology platforms are legally mandated to retain transactional ledger logs:

• Statutory Retention Window: Historical financial transaction logs (deposits, completed escrow orders, withdrawals) are retained in an anonymized and encrypted audit archive for the legally mandated period of five (5) to six (6) years.
• Purpose of Retention: This archived data cannot be used for any commercial purpose and is held solely to satisfy statutory anti-money laundering compliance, prevent financial fraud, and comply with lawful regulatory subpoenas.

3. Prerequisite Checklist Before Deletion

• Zero Pending Escrow Orders: Ensure you have no active buy or sell orders currently awaiting payment or delivery.
• Withdraw Available Balance: If you have funds in your MRX wallet, withdraw them to your bank account prior to submitting your deletion request, as account deactivation is permanent and irreversible.

4. Alternative In-App Deletion

If you currently have the MRX Exchange mobile app installed on your phone, you can also initiate deletion instantly inside the app by going to: Profile → Security & PIN → Delete Account.