diff --git a/api/__pycache__/settings.cpython-312.pyc b/api/__pycache__/settings.cpython-312.pyc
index ca73c951..edc1fd48 100644
Binary files a/api/__pycache__/settings.cpython-312.pyc and b/api/__pycache__/settings.cpython-312.pyc differ
diff --git a/app/__pycache__/cleardata.cpython-312.pyc b/app/__pycache__/cleardata.cpython-312.pyc
index 2334e05c..9f6b360a 100644
Binary files a/app/__pycache__/cleardata.cpython-312.pyc and b/app/__pycache__/cleardata.cpython-312.pyc differ
diff --git a/app/__pycache__/signals.cpython-312.pyc b/app/__pycache__/signals.cpython-312.pyc
index bb4ebf2e..783df8fe 100644
Binary files a/app/__pycache__/signals.cpython-312.pyc and b/app/__pycache__/signals.cpython-312.pyc differ
diff --git a/app/__pycache__/workflow_utils.cpython-312.pyc b/app/__pycache__/workflow_utils.cpython-312.pyc
index f8d5fe3f..6b46abc6 100644
Binary files a/app/__pycache__/workflow_utils.cpython-312.pyc and b/app/__pycache__/workflow_utils.cpython-312.pyc differ
diff --git a/app/cleardata.py b/app/cleardata.py
index 54b92113..55a812e2 100644
--- a/app/cleardata.py
+++ b/app/cleardata.py
@@ -5,73 +5,21 @@ from app.models import *
 
 
 #==========================================================================================
-# @api_view(['POST'])
-# def data_deletion(request):
-#   if request.method != 'POST':
-#     return Response(status=status.HTTP_400_BAD_REQUEST)
-  
-#   #check password
-#   try:
-#     password = request.data['password']
-#     hash = request.data['hash']
-#     if password != "igyRr8HOW5e7G4PE09hso3nrLKPMPcGqpYlnkZ2zmqKBxoo4Pg":
-#       return Response(status=status.HTTP_400_BAD_REQUEST)
-    
-#     if hash != "05c62b974e358cb9a61d0418e5ccb271b9e9a76b240e878f4509fc1e7536114e":
-#       return Response(status=status.HTTP_400_BAD_REQUEST)
-  
-#     Customer_Note.objects.all().delete()
-#     Contract.objects.all().delete()
-#     Customer_File.objects.all().delete()
-#     Customer_People.objects.all().delete()
-#     Customer.objects.all().delete()
-#     Email_Sent.objects.all().delete()
-#     Entry_File.objects.all().delete()
-#     Internal_Entry.objects.all().delete()
-#     Account_Book.objects.all().delete()
-
-#     Staff_File.objects.all().delete()
-#     Staff.objects.all().delete()
-
-#     Message_Receiver.objects.all().delete()
-#     Message.objects.all().delete()
-#     Email_Sent.objects.all().delete()
-
-#     Branch.objects.all().update(manager=None, signature=None)
-
-#     People_File.objects.all().delete()
-#     People.objects.all().delete()
-#     Company.objects.all().delete()
-    
-#     default_user = User.objects.filter(username='support@y99.vn').first()
-#     News.objects.all().update(user=default_user)
-
-#     Token.objects.all().delete()
-#     User_Apps.objects.exclude(user__username__in=['bigdatatech', 'support@y99.vn', 'admin@y99.vn']).delete()
-    
-#     File.objects.exclude(user__username__in=['bigdatatech', 'support@y99.vn', 'admin@y99.vn']).delete()
-#     User.objects.exclude(username__in=['bigdatatech', 'support@y99.vn', 'admin@y99.vn']).delete()
-    
-#     for row in Internal_Account.objects.all():
-#       row.balance = 0
-#       row.save()
-    
-#     return Response(status=status.HTTP_200_OK)
-#   except Exception as e:
-#       print(e)
-#       return Response(status=status.HTTP_400_BAD_REQUEST)
-
-
-#==========================================================================================
-@api_view(['GET', 'POST'])
+@api_view(['POST'])
 def data_deletion(request):
+  if request.method != 'POST':
+    return Response(status=status.HTTP_400_BAD_REQUEST)
+  
   #check password
   try:
-    # Customer_Note.objects.all().delete()
-    # Contract.objects.all().delete()
-    # Customer_File.objects.all().delete()
-    # Customer_People.objects.all().delete()
-    # Customer.objects.all().delete()
+    password = request.data['password']
+    hash = request.data['hash']
+    if password != "QOJpl37zHN1Y1S3yBbuNyYXTjSHqioQzlTgwqZnCIPbFe4W0F0":
+      return Response(status=status.HTTP_400_BAD_REQUEST)
+    
+    if hash != "8816f9082eb2a9adf08dca6e0273d40908f409b6f8ca60bbeedd5d8d437c603b":
+      return Response(status=status.HTTP_400_BAD_REQUEST)
+  
     Email_Sent.objects.all().delete()
     Entry_File.objects.all().delete()
     Internal_Entry.objects.all().delete()
@@ -81,8 +29,11 @@ def data_deletion(request):
     Contract.objects.all().delete()
     Product_Booked.objects.all().delete()
     Transaction_File.objects.all().delete()
+    Payment_Schedule.objects.all().delete()
     Transaction_Detail.objects.all().delete()
     Transaction.objects.all().delete()
+    Product_Note.objects.all().delete()
+    Product.objects.update(status=Product_Status.objects.get(id=2))
 
     for row in Internal_Account.objects.all():
       row.balance = 0
@@ -91,4 +42,36 @@ def data_deletion(request):
     return Response(status=status.HTTP_200_OK)
   except Exception as e:
       print(e)
-      return Response(status=status.HTTP_400_BAD_REQUEST)
\ No newline at end of file
+      return Response(status=status.HTTP_400_BAD_REQUEST)
+
+
+# #==========================================================================================
+# @api_view(['GET', 'POST'])
+# def data_deletion(request):
+#   #check password
+#   try:
+#     # Customer_Note.objects.all().delete()
+#     # Contract.objects.all().delete()
+#     # Customer_File.objects.all().delete()
+#     # Customer_People.objects.all().delete()
+#     # Customer.objects.all().delete()
+#     Email_Sent.objects.all().delete()
+#     Entry_File.objects.all().delete()
+#     Internal_Entry.objects.all().delete()
+#     Account_Book.objects.all().delete()
+#     Email_Sent.objects.all().delete()
+
+#     Contract.objects.all().delete()
+#     Product_Booked.objects.all().delete()
+#     Transaction_File.objects.all().delete()
+#     Transaction_Detail.objects.all().delete()
+#     Transaction.objects.all().delete()
+
+#     for row in Internal_Account.objects.all():
+#       row.balance = 0
+#       row.save()
+    
+#     return Response(status=status.HTTP_200_OK)
+#   except Exception as e:
+#       print(e)
+#       return Response(status=status.HTTP_400_BAD_REQUEST)
\ No newline at end of file
diff --git a/static/files/20260106101444-entry.xlsx b/static/files/20260106101444-entry.xlsx
new file mode 100644
index 00000000..e477a595
Binary files /dev/null and b/static/files/20260106101444-entry.xlsx differ
diff --git a/static/files/20260106101638-entry.xlsx b/static/files/20260106101638-entry.xlsx
new file mode 100644
index 00000000..cf984616
Binary files /dev/null and b/static/files/20260106101638-entry.xlsx differ