Request account deletion

If you have an active account

Sign in and go to Settings → Privacy → Delete account. The in-app flow will:

1. Show you exactly what data will be deleted
2. Ask you to type your organisation name to confirm
3. Mark your tenant as pending_deletion in the system
4. Send a confirmation email to the account administrator
5. Give you a 90-day grace period to export your data and reverse the decision

We will not delete your data during the 90-day grace period. If you change your mind, contact [email protected] from the email address on the account to reverse the request.

If you can't sign in

For security reasons, account deletion cannot be requested from this public page. If you no longer have access to your account, email us at [email protected] from the email address associated with your account. We will verify your identity (using your account email, organisation name, and any other reasonable identifier) and process the deletion manually. This is the same 90-day grace period applies.

What gets deleted

After the 90-day grace period, the following data is permanently deleted from production systems and backups:

• Staff member records (names, contact details, employment history)
• Certification records and uploaded evidence (PDFs, images)
• Compliance alerts, snapshots, and historical scoring data
• Team membership and invitation records
• Audit logs older than the legal retention period required by Australian law

Some records may be retained for longer where required to comply with Australian legal obligations (e.g. tax records, ATO record-keeping requirements for 5 years).

1. Day 0: You submit the deletion request. Account marked pending_deletion. You receive a confirmation email.
2. Days 0–90 (grace period): You can still sign in to export your data. To reverse the request, email us within this window.
3. Day 90: Permanent deletion runs. Personal information is removed from production systems and backups over the next 7–14 days.
4. Day ~104: Deletion complete. A final email is sent confirming the deletion has finished.

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to request deletion of your personal information. If you believe we have not handled your deletion request appropriately, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.