Data deletion and export

What exists today

DRAFT: The service operator is intended to be EduInvestment Holdings LLC, which the owner describes as a Delaware limited liability company (not independently checked against a company registry). The company’s legal address, as stated by the owner (not proof of registration and not stated to be an address for legal notices): 16192 Coastal Highway, Lewes, DE 19958, United States. Separate mailing address, not stated to be a registered office or an address for legal notices: 8 Hudson Avenue, Eastleigh Ridge, Edenvale, GP 1609, South Africa.

On the Account page, signed-in users can use the account export tool (Download my data, a JSON file) and the account deletion tool (I want to delete my account; you confirm with your email address and, if you have one, your password). The JSON export includes your sign-in details, consent record, billing links and daily Ask Ossy message counts, DRAFT: and your saved lists with their snapshots, your alert preference, any feedback you sent and, if you switched on server sync, your project note; it does not include chat messages, attachments or requests sent to the AI provider (our application is not designed to store attachments as account records, so they are not part of the download or the deletion tool; copies may still exist at the AI provider or in provider logs, as described in the Privacy Policy). We describe only the tools that exist.

If you cannot use those tools, or want something they do not cover, email support@solomulti.com. For security, requests should be sent from the email address on the account, and we may need to verify that you control that address before we export or delete account data. See "How a manual request works" below. We intend to reply to general requests within 5 business days. These are targets we intend to meet, not guarantees, and they do not override any period that applicable law sets.

How a manual request works

DRAFT: This describes the intended process; it is not final until the open items on this page are settled. Use it only if the Account page tools do not cover what you need (for example you cannot sign in, or you want a correction or something the tools do not do). Contact: support@solomulti.com.

• Send the request from the email address of your account, and say what you want (a copy of your data, deletion of your account, a correction, or something else).
• We may ask you to confirm that you control that address before we act, and we may ask for more detail if the request is unclear. If we cannot verify the request, we may not be able to act on it. We will not ask for a password.
• We intend to complete, or give you an answer to, a verified deletion or export request within 30 days of receiving it. We count from when we have the information needed to verify and process the request. Where applicable law sets a different or shorter period, that law applies.
• Deletion has the scope described under "What would be deleted, and what would remain" below: it covers our own account records, and it cannot reach records held by Stripe, hosting or email providers or the AI provider outside our tools. We will tell you if a request cannot be completed in full.
• The self-service account deletion tool is blocked while an active Premium subscription would still renew; cancel it first (Account, then Manage billing).
• In short: we intend to log your request and acknowledge it within 5 business days, check that it comes from the email address of the account, check for an active subscription, delete our account records where the request is verified and can be completed, and within 30 days tell you what was deleted and what remains (for example payment records held by Stripe, or data held by providers outside our tools). These are targets we intend to meet, not guarantees, and they do not override any period that applicable law sets.
• This page is not legal advice and does not promise a particular outcome; any rights you may have depend on the law that applies to you (see the Privacy Policy).

Your rights and legal bases

Any rights you may have, the legal bases for any processing, and any limits or exceptions depend on the applicable law. The Privacy Policy contains the current draft placeholder for this: [LEGAL BASES AND RIGHTS UNDER THE APPLICABLE LAW - TO BE DRAFTED BY A LAWYER].

To make an access, correction, export or deletion request, use the Account page tools or the manual process described above.

International transfers are addressed in the Privacy Policy. The current draft placeholder is: [INTERNATIONAL DATA TRANSFER MECHANISM - TO BE CONFIRMED].

Things you can do yourself

• Cancel a Premium subscription: Account, then Manage billing (Stripe portal).
• Sign out on this browser: use the Sign out button. If your account uses a password, changing or resetting it is intended to invalidate other browser sessions.
• Remove saved browser data in this browser: close the tab (the last search is kept for that tab only) and clear this site’s cookies and site data (local storage), DRAFT: which is where a browser-only project note is kept. This does not remove any server-side records or provider logs described in the Privacy Policy.
• The Premium "export" feature exports a list of catalog projects you selected as Markdown or text. It is not a personal-data export.
• DRAFT: Delete a saved list or a project in it from the Saved lists page, switch off the server copy of your project note, and switch off or unsubscribe from email alerts. Account deletion removes the server copy of the note, but it cannot clear a browser-only note on your device; that is removed by clearing site data in that browser.

What would be deleted, and what would remain

Deleting your account is designed to remove the account record (email, name, picture URL, linked sign-in providers and any stored provider tokens), the password hash and pending sign-up, verification and reset tokens, the consent record, the local subscription records and the per-account daily chat counts, DRAFT: and your saved lists, their snapshots and alert records, your server-side project note and your alert preference. It is designed to sign you out of existing sessions, using a short-lived marker that is kept for 31 days. The self-service deletion tool is blocked while a Premium subscription would still renew: cancel it first in the Stripe portal.

These may remain: records Stripe keeps outside this tool (we do not delete Stripe customer data from the tool and have not confirmed how long Stripe keeps it), the chat usage log (not designed to include account identifiers or message text, and scheduled to be deleted after 180 days), a short-lived marker (31 days) that is used to sign out old sessions of the deleted account, data or logs that your sign-in provider, our hosting providers or our email provider may hold outside this tool, and, if you used Ask Ossy, requests sent to the AI provider (the text you typed, DRAFT: any project note and, if attachments are switched on and you sent one, any text attachment sent with the request, and the current results if you chatted about them; our application is not designed to add your name, email or account id, but the text you type or attach may contain personal data). Provider retention periods, including Stripe, hosting logs and the AI provider, have not been fully reviewed or confirmed for this draft.

Because the account id is derived from your email address, signing up again with the same email is expected to create an account with the same id. The new account is not intended to include account data removed in the deletion process, but the records listed above may still exist outside the account.

Open items

We keep per-account daily Ask Ossy message counts for 30 days. The legal bases, rights, deadlines and international transfer mechanism are still open draft items: [LEGAL BASES AND RIGHTS UNDER THE APPLICABLE LAW - TO BE DRAFTED BY A LAWYER], [INTERNATIONAL DATA TRANSFER MECHANISM - TO BE CONFIRMED]. The reply timeframes on this page (5 business days for general replies and 30 days for deletion and export requests) are draft operational targets, not guarantees, and have not been checked against every law that may apply.