Delete My Data

Your right to erasure

You have the right to request that we delete all personal data we hold about you. This includes your account, review history, CAS and coursework data, profile information, and any optional feedback you submitted. You can exercise this right at any time.

How to request deletion

To delete your data, send an email to the address below with the subject line "Data Deletion Request". Please include the email address associated with your account so we can identify and remove your records. We will process your request within 30 days and confirm by email once complete.

What gets deleted

• Your account — email address, display name, country, and school.
• Your review history — all feedback results, scores, and document extracts stored in your history.
• Your CAS and coursework data — experiences, reflections, study plans, and class content you entered.
• Your session tokens — you will be signed out of all devices.
• Any optional feedback messages you submitted through the feedback form.
• Your analytics consent preference — the Meta analytics choice stored in your browser's local storage.
• Product analytics identifiers — we request erasure of your profile in PostHog and ask Google to process analytics erasure requests where applicable.

What we are required to keep

• Payment records — we are legally required to retain transaction records for up to 7 years under applicable tax and accounting law. These are held by our payment processor (Stripe or Payphone) and contain no document content.
• IP address hashes — these are already deleted automatically within 48 hours and are stored only as irreversible hashes with no link to your account.
• Aggregated analytics — Google Analytics, PostHog, and Vercel may retain anonymised or aggregated usage data under their own retention policies. We will assist you in exercising your rights with those providers.

Clearing cookies and local storage

You can clear ibacalao cookies and local storage at any time through your browser settings. This removes your session, analytics consent preference, and any Meta cookies. Google Analytics cookies (_ga, _ga_*) can also be cleared from your browser; see our privacy policy for details on what each provider stores.

Deleting your account yourself

If you have an account, you can also delete it directly from your account settings page. This will remove your profile and review history immediately. For complete erasure of all records across our systems, including any residual data held by third-party providers, please send us a deletion request by email.

Contact

Send your data deletion request to ibacalao [at] ibacalao [dot] com with the subject line "Data Deletion Request".

For more context, see our privacy policy and terms of service.