GDPR · Article 17

Request data deletion

Submit a request to delete your personal data from StartOS. We will respond within 30 days. You can also exercise this right from your account at /settings/profile if you have an active StartOS account.

What gets deleted

  • Account profile, name, email, bio, avatar
  • Authentication credentials and active sessions
  • API keys you created
  • Organization memberships
  • Marketing preferences
  • Personal information on contact and employee records you appear on (name, email, phone, address, tax ID)

What we must retain (legal hold)

Financial records (invoices, bills, transactions, payments, payroll lines) are subject to tax and audit retention obligations, typically 7-10 years depending on jurisdiction. We keep these records but replace your personal information with anonymized stubs — your name and contact details are removed; the financial line items remain for our books.

This is consistent with GDPR Article 17(3)(b), which carves out an exception for compliance with a legal obligation.

The email address we will use to match your records. If your records are under a different email, please use that one instead.