Data Deletion Request

Last updated: April 23, 2026 · GDPR Art. 17 · CCPA §1798.105

Your Right to Deletion

You have the right to request deletion of your personal data:

EU residents: Under Article 17 of the General Data Protection Regulation (GDPR), the "right to be forgotten".
California residents: Under §1798.105 of the California Consumer Privacy Act (CCPA), the right to deletion.
All users: You may request deletion at any time, regardless of jurisdiction.

What We Delete

Upon a verified deletion request we will, within 30 days, permanently delete:

Your account, profile, email, name, and password hash.
Your credit reports (raw bureau pulls and parsed data).
All dispute letters generated for you.
Your reminder schedule and notification logs.
Affiliate referral records (your side; the referring creator's commission records remain in our books for 7 years per IRS retention rules, but with your identifying details removed).

What We Are Required To Keep

Some records we must retain by law, even after a deletion request:

Billing records (7 years): Stripe receipts and tax records, per IRS §6001.
Dispute correspondence already mailed (5 years): Required by FCRA §609 for evidentiary purposes if a consumer later sues a bureau.
Fraud / abuse logs (3 years): If your account was suspended for chargeback fraud or abuse, we retain a hashed identifier to prevent re-registration.

These retention obligations are minimum legal requirements, not commercial choices.

How to Submit a Request

The fastest way is via our contact form, which routes directly to our privacy team:

Open the deletion request form

Or email support@restore.credit with the subject line "Data Deletion Request". To verify identity we will ask you to confirm the request from the email address on the account.

Verification

To prevent malicious deletion requests, we verify identity by:

Sending a confirmation email to the address on the account.
Requiring you to click a one-time confirmation link within 7 days.
For high-value accounts (Lifetime / 6+ months active), an additional security question may be asked.

Timeline

Verified requests are processed within 30 calendar days per GDPR Art. 12(3). You will receive a final confirmation email when deletion is complete.

Questions

Email support@restore.credit.