Data Deletion Policy

Last Updated: 2025-12-18T00:00:00.000Z

1. Purpose

The purpose of this document is to define the policy for data deletion at Xuperson and to outline the procedures for users to request the deletion of their personal data. This policy ensures that data is disposed of securely and in accordance with applicable laws (such as GDPR and CCPA) when it is no longer required or when a valid request is made.

2. Scope

This policy applies to all personal data stored by Xuperson, including but not limited to:

  • User account information (profiles, preferences).
  • Transaction history.
  • Generated content and logs.
  • Marketing data.

3. Data Retention Principles

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

3.1 Account Active State

As long as your account is active, we retain your data to provide our services to you.

3.2 Inactive Accounts

If an account has been inactive for a period of 24 months, we may designate it for deletion or anonymization, subject to prior notification.

4. How to Request Data Deletion

You have the right to request the deletion of your personal data. We provide multiple methods for you to exercise this right:

The fastest way to delete your data is through the Platform settings:

  1. Log in to your account.
  2. Navigate to Settings > Privacy or Account.
  3. Click on Delete Account.
  4. Follow the confirmation steps.

Note: This action is often irreversible. Please download your data before proceeding.

4.2 Email Request

If you cannot access your account or prefer to submit a request manually:

  1. Send an email to policy@xuperson.com with the subject line “Data Deletion Request”.
  2. Please send the email from the address associated with your account to facilitate verification.
  3. In the body of the email, clearly state that you wish to have your account and associated data deleted.

5. Verification Process

To protect your privacy and security, we must verify your identity before processing a deletion request.

  • For Email Requests: We may ask for additional proof of identity (e.g., answering security questions, confirming a code sent to your phone/email).
  • Authorized Agents: If you are submitting a request on behalf of someone else, we require proof of your authorization (e.g., a power of attorney or written permission from the user).

6. Processing and Timeline

Once your identity is verified:

  • We will process your deletion request within 30 days.
  • If the request is complex, we may extend this period by up to 60 additional days, in which case we will notify you of the extension and the reason for the delay.
  • We will confirm via email when the deletion process is complete.

7. What Happens When Data is Deleted?

When your data deletion request is processed:

  1. Account Removal: Your account will be deactivated and removed from our active user databases.
  2. Anonymization: In some cases, instead of full deletion, we may anonymize your data (remove all personal identifiers) so that it can no longer be associated with you. We use this anonymized data for analytical purposes.
  3. Third Parties: We will notify our third-party service providers to delete your data from their systems.

8. Exceptions to Deletion

We may retain certain personal data even after a deletion request if it is reasonably necessary to:

  • Transactional Records: Complete a transaction or fulfill the terms of a written warranty.
  • Security: Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity.
  • Legal Compliance: Comply with a legal obligation (e.g., tax laws requiring us to keep transaction records for a certain number of years).
  • Internal Use: Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.

9. Backups and Archives

Your data may persist in our backup systems for a limited period (typically up to 90 days) due to our disaster recovery protocols. These backups are encrypted and securely stored. Your data will be deleted from backups as they are overwritten in the normal course of business. We do not actively access this data unless a restoration is required.

10. Contact Information

For any questions regarding this Data Deletion Policy or to follow up on a request, please contact our Privacy Officer at:

policy@xuperson.com