Data Deletion Instructions
Last updated 6 September 2026 · Applies to my-idara.com and the Idara platform
This page explains how to have information held by Idara deleted, including anything obtained through Google, Meta or TikTok. Every route below ends in the same commitment: deletion within 30 days, and a written confirmation when it is done.
1. Which route applies to you
| Your situation | What to do |
|---|---|
| You connected your business's Google, Meta or TikTok account to Idara | Section 2 — disconnect it yourself, which stops access at once, then section 6 to have what we already hold erased |
| You hold an Idara account through your employer | Section 3 — ask your administrator, or write to us |
| Your details were entered into Idara by a restaurant group — you are their employee, their guest, or you left a review | Section 4 |
| You joined the waitlist on my-idara.com | Section 5 — one email removes you |
2. Disconnecting a connected account
Any administrator can remove a connection from inside Idara, under System → Integrations. Choose the tab for the service, then remove the connection. Access stops the moment you do this.
You can also revoke Idara's access from the platform's own settings, which we honour immediately because our access stops working:
- Google — myaccount.google.com/permissions, then remove Idara.
- Facebook and Instagram — Facebook Settings & privacy → Settings → Apps and websites, then remove Idara.
- TikTok — TikTok Settings and privacy → Security and permissions → Manage app permissions, then remove Idara.
Revoking access stops us reading anything further, but it does not by itself erase what we already hold. To have that erased as well, send the request in section 6. We delete it within 30 days.
What removing a connection does
Removing a connection ends Idara's access to the service and destroys the credential that granted it. It does not, on its own, erase information already retrieved — for that, send the request in section 6.
| Service | What removing the connection does | What stays until you ask us to erase it |
|---|---|---|
| Google Business Profile | Reading and replying stop at once. The stored access credential is destroyed, together with the cached list of business locations. | Reviews already retrieved — the text, star rating, reviewer display name, photos, videos and replies — stay in our database. |
| Meta (Facebook, Instagram) | Reading and posting stop at once, and the stored access credential is destroyed. | Pages, connected accounts, posts, comments, messages and audience statistics already retrieved stay in our database. |
| TikTok | Reading stops at once, and the stored access credential is destroyed. | Profile details, video lists and account and advertising statistics already retrieved stay in our database. |
| HungerStation, Localyser, Foodics, Odoo, JISR | Reading stops at once, and any stored credential is destroyed. | Outlets, reviews, ratings, menu items, sales, costs, recipes and staff records already retrieved stay in our database. |
3. If you hold an Idara account
Your employer controls your account. Ask your Idara administrator to remove it, or write to us at systems@mao-sa.org and we will act with your employer.
One thing we keep, and why: entries in the audit log recording what an account did remain, because a shared operations system cannot function if its record of who changed what can be erased. Those entries are kept for accountability and security only, and are never used for anything else.
4. If a restaurant group entered your details
Where a business uses Idara to hold information about its employees, its guests, or people who left reviews, that business decides what is kept and for how long. We hold it on their behalf and act on their instructions.
Write to that business first. If you do not know who to ask, write to us at systems@mao-sa.org with whatever detail you have and we will identify them, pass your request on, and confirm to you when it has been dealt with.
5. If you joined the waitlist
Email systems@mao-sa.org with the subject Delete my waitlist entry, from the address you signed up with. We remove the entry and confirm. No further step is needed.
6. Asking us directly
Send an email to systems@mao-sa.org with the subject Data deletion request, telling us:
- Your name, and the email address or phone number your information is held under.
- Which of the situations in section 1 applies to you.
- The service the data came from, if it came from a connected account — Google, Meta, TikTok or another.
What happens next
- We acknowledge within 5 working days.
- We may ask you to confirm your identity, so that nobody can delete another person's information.
- We complete the deletion within 30 days of confirming who you are, and write to tell you it is done.
- Where the request concerns information a restaurant group controls, we pass it to them and confirm the outcome to you.
7. What we may keep, and why
We only keep information after a deletion request where the law requires it or where it is needed to establish or defend a legal claim. Specifically:
- Records we must retain under accounting or tax law.
- Audit log entries recording actions taken in the system, as explained in section 3.
- Security records concerning abuse or an attack, kept only as long as needed for that purpose.
Anything kept is isolated, is not used for any other purpose, and is deleted once the reason for keeping it ends.
8. Backups
Deleted information may persist in encrypted backups for a short period after removal from the live system. It is not restored to the live system, is inaccessible in normal operation, and is overwritten as backups rotate, within 90 days.
9. Contact
Mawrid al Usul Company for Investment (شركة مورد الأصول للاستثمار) · Building 7448, Al Andalus Branch Street, Al Hamra District, Jeddah 23212, Kingdom of Saudi Arabia · systems@mao-sa.org