Data Deletion Policy
How to request deletion of your personal data.
You have the right to ask us to delete the personal data we hold about you. This page explains exactly what gets deleted, what we're legally required to retain, and how to make the request.
1. What you can have deleted
On request, we will permanently delete:
- Your account profile (name, email, password hash).
- Past support correspondence between you and us.
- Contact-form submissions you've made.
- Optional analytics data tied to your account.
- Optional anonymous error reports you've submitted.
2. What we're legally required to retain
Some data must be kept under Finnish accounting and EU tax law, even after you ask for deletion. We retain only the minimum necessary:
- Tax records — invoices, refund records, and the personal data needed to identify them. Retained for 7 years from the end of the relevant accounting period (Finnish Accounting Act).
- Anti-fraud records — payment fingerprints (not card data) needed to detect repeat fraudulent activity. Retained for up to 5 years.
This minimal retained data is locked down to billing-only access and is never used for marketing or analytics.
3. How to request deletion
Email support@onvore.com from the email address associated with your account. Subject line: "Data deletion request".
To prevent abuse, we will verify the request by replying to that email address and asking you to confirm. Once confirmed, deletion is completed within 30 days.
4. Active subscriptions
If you have an active subscription, deletion ends that subscription immediately (since we can no longer authenticate you against it). To keep the subscription running, simply cancel the auto-renewal but leave the account in place. To stop billing AND have your data deleted, request both together.
You will not receive a refund of the remaining subscription period as part of a deletion request — refunds are governed by our Refund Policy and require a separate request inside the 14-day window.
5. Active licences
When your account is deleted, all active licence keys associated with it are revoked. The plugin on the sites those licences were activated on will gracefully revert to free behaviour on its next daily check. No customer data on those sites is affected — only the Pro-features lock back to Free.
6. Data held by our sub-processors
Our payment provider (Lemon Squeezy) holds separate records of your transactions. We will forward your deletion request to them, but they have their own retention policy under their privacy policy, and may retain certain financial records under law independent of us.
7. Confirmation
Once deletion is complete, you'll receive a confirmation email summarising what was deleted and what (if anything) was retained under legal obligation, including how long that retained data will remain.
8. Right to lodge a complaint
If you believe we have not handled your deletion request properly, you have the right to complain to the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi), or to the data-protection authority in your country of residence within the EEA.
9. Contact
For any data-deletion question, email support@onvore.com.