Account deletion & data retention
Effective 2026-07-28
You can permanently delete your VesselTwin account from Settings. This page explains what happens before, during, and after the deletion runs, and what we retain (and why).
1. The 30-day grace period
When you request deletion we lock your account immediately so no new data can be written, and we schedule the permanent deletion 30 days out. During those 30 days you can cancel by clicking the one-shot link in the email we send you. After 30 days the deletion runs and we cannot recover the data.
2. What gets permanently deleted
- Your profile, name, email, avatar, login
- Every private boat record you own — photos, measurements, maintenance history, parts, invoices, receipts, surveys, warranties, and other personal documents
- Draft or private comments, service requests, and contributions you authored
- OAuth + Clerk identity records
- Billing contact information and provider identifiers, including Stripe Customer and Checkout records submitted for provider-side privacy redaction
3. What we retain (and why)
- Content you deliberately published. Public community posts, public comments, approved model-gallery photos, and visible vendor reviews may remain because you chose to share them with other owners. We remove your account and vessel links and present the contribution anonymously. Draft, private, hidden, rejected, or unconsented content is deleted.
- Reviewed non-personal reference materials. An owner or equipment manual remains only if it has been explicitly reviewed and approved for the shared reference catalog. We remove the uploader, filename, vessel link, and other identifying metadata. Invoices, receipts, surveys, warranties, registrations, and other private or personal documents are not eligible and are deleted.
- Audit-log rows that reference you. We keep the row but strip your identity, IP address, browser details, and identifying JSON. The actor field becomes empty and we retain only the high-level event plus a random deletion receipt that cannot identify you by itself. This is required so we can investigate security incidents and prove compliance, and is permitted under GDPR Art. 17(3)(b)/(e) for legitimate-interest record-keeping.
- Boats you transferred to another owner. If you sold a boat through VesselTwin and transferred its record to the new owner, the boat and its maintenance history stay with the new owner — your name is removed from any entries you authored, replaced with an anonymous "previous owner" reference.
- Vendor business records. If a marine vendor used a VesselTwin share link to submit you an estimate or a job completion record, the vendor keeps that record as part of their own business documentation.
- DMCA notices. If you submitted or were the subject of a DMCA takedown, the §512(c)(3) notice is retained per copyright-office requirements.
4. Backups
The live account cascade deletes private database and object-storage records. We also submit supported billing records to Stripe's privacy-redaction process; Stripe says complex jobs can take up to 30 days. Encrypted disaster-recovery copies are isolated from live use until the applicable backup expires or is securely retired. If a backup is restored, deletion records and requests remain subject to this policy and must be reapplied. For the status of a deletion or a regulatory deadline, email privacy@vesseltwin.io.
5. What you should do before deleting
- Export any boat records you want to keep (Settings → Export, when available)
- Notify any vendors holding active service requests — they'll lose access on deletion day
- If you administer an organization, transfer ownership to another member first
6. Questions or appeals
For data-subject access, rectification, portability, or restriction requests, email privacy@vesseltwin.io. For security concerns about a deletion you did not authorize, email security@vesseltwin.io.