Under GDPR Article 17 you can ask us to delete your account. Zendrhax implements this as a 14-day grace window followed by automatic anonymisation. No support ticket is required.
Important: workspace owners
If you own a workspace, you cannot start the deletion countdown until you have transferred or deleted every workspace you own. This prevents colleagues, clients, and historical records from being orphaned.
The platform tells you exactly how many workspaces are blocking the request.
To unblock:
- For each workspace you own, decide whether to: - Delete the workspace from
/settings(subject to the pre-conditions in Your first workspace), or - Ask support to transfer ownership to another member. There is no ownership-transfer UI yet; write to support@zendrhax.com. - Once you own zero workspaces, you can request deletion.
How to request deletion
- Sign in.
- Open Settings -> Privacy & data.
- Click Request account deletion.
If you still own one or more workspaces, the button is intentionally hidden and replaced with a blocking message. Clear that ownership first, then come back and request deletion.
The platform schedules your account for anonymisation 14 days from now and emails you a confirmation. The email contains a cancellation link in case you change your mind.
During the 14-day grace window
- You can keep using the platform as normal.
- You can cancel the request at any time, either by clicking the cancellation link in the email or by POSTing to
/me/data-deletion-request/cancelwhile signed in. - After cancellation, your account returns to normal and nothing has been anonymised yet.
What "delete" actually means
After the 14-day window elapses, a daily cron job anonymises your account:
- Your name becomes
Deleted user. - Your email becomes
deleted-<id>@deleted.invalid. - Your password, 2FA secret, active sessions, login history, API keys, password resets, and OTP codes are hard-deleted.
- Your workspace memberships are removed, so you no longer appear in team rosters.
- A tombstone
anonymised_attimestamp marks the row as anonymised.
Audit log entries are intentionally kept. Workspace owners have a legitimate interest in retaining those records. The user_id there points to the anonymised tombstone row; the personal data behind it is gone.
After deletion
You will no longer be able to sign in. If you want to come back later, register again with the same email. It becomes available again after anonymisation.
Data that survives anonymisation
- Invoices you issued in workspaces you no longer own. They belong to that workspace, not to you.
- Payment records on Stripe's side. They are outside our control; contact Stripe support if you need them removed.
- Backups containing your old data. Automated retention permanently expires them no later than 30 days. If a regulator requires urgent removal from backups, contact support.