Procedure actually implemented (see docs/DATA_RETENTION.md):
- Delete my account: Settings → My profile, after recent re-authentication and typing your email. Refused if you are the only owner of an organisation that has other members (transfer ownership first).
- As soon as you confirm: sign-in impossible, all sessions revoked; organisations where you are the only member are suspended (monitoring and alerts stopped).
- 14-day grace period: data intact, restorable on request to support.
- Final purge afterwards: products and price history, alerts, opportunities, catalogue, Autopilot data, related payments, messages, memberships, invitations, sessions, Google identities, recovery codes and tokens. Security logs are kept without IP address or user agent; trial anti-abuse fingerprints (HMAC, no plain data) are kept.
- Deleting an organisation: owner only, verified email, re-authentication and exact name; same grace period then purge.
Invoices and payment data: kept by the payment provider (Stripe) under its obligations; at Pricevra: 10 years for accounting records (French Commercial Code, art. L123-22).
Changelog
- — Payment methods updated: card payment through Stripe; monthly subscription that renews automatically.
- — Revision 41: plain-language summary, table of contents, changelog, print version; unproven promises removed.
- — First version of the legal pages (draft).