Legal

Data Deletion Policy

Last updated: July 14, 2026

You can export your data and request deletion of your DoneAfter account. This Policy explains what deletion covers, timing, exceptions (including legal holds), and how deceased-user situations are handled.

1. Your control

Subject to this Policy and applicable law, you may:

  • Export a packaged copy of your account data via in-account tools (delivered through a secure, expiring link)
  • Request correction of account profile information
  • Request deletion of your account and associated User Content

Requests can be initiated in account settings where available, or by opening a ticket via Contact / Support from your registered account email. We may require identity verification before acting.

2. What deletion generally includes

When a deletion request is approved and completed (after any grace period), we aim to remove or irreversibly de-identify:

  • Profile and authentication credentials
  • Messages, letters, document vault files, and digital-asset / business / crypto instruction records
  • Trusted-contact records you created, invites, and related group data
  • Release rules, check-in settings, emergency cards, AI identity policy records, timelines, and similar plan data
  • Pending scheduled deliveries, armed gifts (subject to payment/fulfillment constraints), and unfinished releases tied solely to your account
  • Uploaded files from private storage associated with your account

3. What may be retained or delayed

We may retain limited information when necessary for:

  • Legal compliance, tax, accounting, and audit obligations
  • Fraud prevention, security investigations, and dispute resolution
  • Enforcing the Terms and defending legal claims
  • Legal holds placed when we receive valid legal process or have a good-faith belief retention is required
  • Billing records and transaction history required by payment processors or law
  • Aggregated or de-identified analytics that cannot reasonably identify you

Security and audit logs may be retained on a longer schedule to protect the platform and investigate abuse. Retained data is limited to what is reasonably necessary and protected under our Security Policy.

4. Process and timing

  1. Request: You submit a deletion request and confirm it.
  2. Grace / cancellation window: We may apply a short waiting period during which you can cancel (especially to prevent malicious or accidental deletion).
  3. Soft-delete / disable: Account access is disabled; scheduled jobs that would release or mail content are canceled where feasible.
  4. Hard purge: Database rows and private files are deleted or cryptographically shredded according to our procedures.
  5. Confirmation: Where practical, we confirm completion to your registered email.

Timing depends on verification, holds, and system schedules. We process requests without undue delay and within timeframes required by applicable privacy laws (often 30–45 days, with extensions when permitted and disclosed).

5. Backups

Encrypted backups are rotated on a schedule. Deleted data falls out of backups as retention windows expire. Residual copies in offline backups are not used to restore your account into production except for disaster recovery or legal compulsion, and remain subject to security controls.

6. Trusted contacts and third parties

Deletion of your account removes your stored contact list. If a trusted contact created their own portal login, residual account records for that person may remain if they are an independent user. Items already released to a recipient via secure link may have been downloaded by that recipient; we cannot delete copies on their devices.

We may notify certain contacts that your plan was closed when operationally appropriate and consistent with privacy law.

7. Active verification, disputes, or deceased status

If a trigger verification, dispute, or fulfillment is in progress, we may pause deletion until the matter is resolved or as required by law. If an account has a verified deceased status and ongoing release obligations, we retain what is necessary to complete authorized releases and fulfill legal duties, then delete the remainder according to this Policy and your configured instructions.

8. Gifts After and payments

Paid gift orders and payment records may be retained for fulfillment, refunds, chargebacks, and accounting. Canceling an account does not automatically refund completed payments. Contact support regarding pending armed gifts.

9. Children

If we learn we collected personal information from a child in violation of our Terms, we will delete it promptly.

10. Contact

Deletion and export help: Contact · Support · related rights also described in the Privacy Policy.