Account deletion that takes effect immediately, with a clear 90-day data-retention policy
Privacy / Trust
When you ask us to delete your account, access is now restricted immediately, and your data is kept for up to 90 days before it is deleted or anonymized - for legal, fraud-prevention, security, dispute and accounting reasons - after which it is removed unless the law requires otherwise. We updated the Privacy Policy to say this clearly in Romanian and English.
What changed
- Requesting account deletion now restricts access to the account immediately (you can no longer sign in), instead of only being queued for later.
- Your data is retained for up to 90 days before deletion or anonymization, for compliance with legal and regulatory obligations, fraud and abuse prevention, platform security, dispute resolution and accounting - then it is deleted or anonymized unless the law requires a longer period.
- The Privacy Policy was updated, in Romanian and English, with this account-deletion and retention wording (only that section; nothing else was changed).
- The mobile apps let you start account deletion from inside the app, as Apple's guidelines require.
How we built it safely
- Immediate restriction is applied only through authenticated requests, so no one can lock another person's account using just their email address (this was caught and fixed in an independent security review).
- Permanent deletion after 90 days runs as a guarded job that respects legal holds and is off by default; it only logs counts, never personal data.
- An independent security and code review found no critical issues, and the full automated test suite passed before the change went live through our safe, gated deploy with a green health check.
Commit: 080917a