Account deletion & data retention

Effective 2026-05-18

You can permanently delete your VesselTwin account from Settings. This page explains what happens before, during, and after the deletion runs, and what we retain (and why).

1. The 30-day grace period

When you request deletion we lock your account immediately so no new data can be written, and we schedule the permanent deletion 30 days out. During those 30 days you can cancel by clicking the one-shot link in the email we send you. After 30 days the deletion runs and we cannot recover the data.

2. What gets permanently deleted

  • Your profile, name, email, avatar, login
  • Every boat you own — photos, measurements, maintenance history, parts, documents
  • Comments, service requests, contributions you authored
  • OAuth + Clerk identity records

3. What we retain (and why)

  • Audit-log rows that reference you. We keep the row but strip your identity — the actor field becomes empty and we only retain a high-level event type (e.g., "account deletion completed"). This is required so we can investigate security incidents and prove compliance, and is permitted under GDPR Art. 17(3)(b)/(e) for legitimate-interest record-keeping.
  • Boats you transferred to another owner. If you sold a boat through VesselTwin and transferred its record to the new owner, the boat and its maintenance history stay with the new owner — your name is removed from any entries you authored, replaced with an anonymous "previous owner" reference.
  • Vendor business records. If a marine vendor used a VesselTwin share link to submit you an estimate or a job completion record, the vendor keeps that record as part of their own business documentation.
  • DMCA notices. If you submitted or were the subject of a DMCA takedown, the §512(c)(3) notice is retained per copyright-office requirements.

4. Backups

We take rolling encrypted backups of our databases and S3 buckets for disaster recovery. Backups overwrite within 30 days of the deletion date, so your data is fully purged within 60 days of the deletion running (30-day grace + 30-day backup rotation). If you need an earlier purge from backups for a regulatory reason, email privacy@vesseltwin.io.

5. What you should do before deleting

  • Export any boat records you want to keep (Settings → Export, when available)
  • Notify any vendors holding active service requests — they'll lose access on deletion day
  • If you administer an organization, transfer ownership to another member first

6. Questions or appeals

For data-subject access, rectification, portability, or restriction requests, email privacy@vesseltwin.io. For security concerns about a deletion you did not authorize, email security@vesseltwin.io.