Account & Data Deletion

Table of Contents

1. Overview
2. Full Account Deletion
3. Partial Data Deletion (without closing your account)
4. In-App Self-Service Options
5. What Is Kept After Deletion
6. Children and Minors (Déblo)
7. How to Submit a Request

You have two distinct rights regarding the data we hold about you:

• Full account deletion: permanently close your account and delete all associated personal data, subject to the legal retention exceptions described in Section 5.
• Partial data deletion: delete one or more specific categories of data (e.g., chat history, uploaded photos, AI consent records) while keeping your account active.

Both options are free, available at any time, and processed within 30 days of receipt under Article 12(3) GDPR. We may need to verify your identity before acting on a request.

2.1 What gets deleted

• Account information: phone number, email, display name, profile photo, language preference, grade level (Déblo).
• Déblo chat history: all conversations between you and the Déblo AI assistant, across iOS, Android, and web.
• Uploaded photos and documents: images of exercises, handwritten notes, invoices, and any other files submitted for analysis.
• Usage data: session history, feature usage, and product-specific activity logs.
• AI consent records: the in-app consents you granted for sharing data with third-party AI providers.
• Authentication data: OTP delivery history, JWT tokens, device identifiers (kept under otpx.dev).

2.2 How to request

Send an email from the address or phone number attached to your account to [email protected] with:

• Subject line: Account Deletion Request — [Product] — [Account Identifier]
• Product: the product whose account you want to delete (Déblo, 0fee, 0cron, 0seat, FLIN, otpx, or "all ZeroSuite products").
• Account identifier: the phone number or email associated with your account.
• Confirmation: the sentence "I confirm that I want to permanently delete this account and the associated personal data."

2.3 Timeline

• Acknowledgement: within 72 hours of receipt.
• Identity verification: we may ask you to confirm the request from the registered phone number or email if the originating address differs.
• Soft delete: your account is immediately deactivated and your data becomes inaccessible to you.
• Hard delete: data is permanently erased from production databases within 30 days and from encrypted backups within 90 days.

2.4 Active subscriptions

If you have an active paid subscription (Déblo Pro, 0cron, 0seat), it will be cancelled at the same time, with no further charges. Refund eligibility follows our Refund & Cancellation Policy.

Yes, you can request deletion of specific categories of data without closing your account. The following categories can be deleted on request while your account remains active:

• Individual chat conversations (Déblo): delete one or more specific conversations from your Déblo history. Available directly in the mobile app via the conversation menu, or on request.
• All Déblo chat history: wipe the full conversation history while keeping your account, profile, and consents.
• Uploaded photos and documents: delete all images and documents you have submitted for OCR or visual analysis, while keeping the corresponding chat text.
• Sign-in audit history: delete the metadata associated with your sign-in events, subject to a 12-month minimum retention where required by anti-fraud and security obligations.
• AI consent records: withdraw your consent for sharing data with third-party AI providers. Withdrawing consent stops the AI features but does not delete the rest of your account data.
• Profile fields: erase optional profile fields (display name, profile photo, grade level) without closing your account.
• Payment records (0fee, paid subscriptions): delete payment-related data on request, except where retention is required by tax, accounting, or anti-money-laundering laws (typically 5 to 10 years depending on jurisdiction).

How to request: send an email to [email protected] with the subject Partial Data Deletion — [Category], listing the categories you want deleted. We will process the request within 30 days.

For some products, you can act on your data directly from the application, without contacting support:

• Déblo (iOS, Android, web): Settings → Privacy → Conversations to delete an individual conversation; Settings → Privacy → AI Consent to withdraw consent.
• 0cron, 0seat, 0fee dashboards: Settings → Billing → Cancel Subscription stops billing immediately. Account closure follows by writing to [email protected].

A small set of data is retained after deletion where we have a legal obligation or a legitimate interest that overrides the right to erasure:

• Payment and invoicing records: retained for the period required by tax, accounting, and anti-money-laundering laws (typically 5 to 10 years).
• Anti-fraud and security logs: minimal sign-in and abuse-prevention metadata retained for up to 12 months, in pseudonymised form where possible.
• Aggregated and anonymised statistics: aggregated usage metrics that no longer identify you may be retained indefinitely.
• Encrypted backups: data may persist in rolling encrypted backups for up to 90 days after the production deletion, after which it is overwritten on the backup rotation.

For the complete retention schedule, see Section 7 of our Privacy Policy.

Déblo is used by students, including minors. Parents, legal guardians, and verified school administrators can request deletion of a minor's account or data on the child's behalf at any time, without justification.

• Email [email protected] with the subject Minor Account Deletion — [Child Identifier].
• Include proof of parental responsibility (family record book, birth certificate, or equivalent).
• We will process the request within 14 days and confirm completion in writing.

For the full set of safeguards applicable to minors, see Section 10 of our Privacy Policy and the dedicated Child Protection Policy.

• Primary channel (deletion requests): [email protected]
• Data Protection Officer: [email protected]
• Postal address: ZeroSuite, INC. — Delaware, USA

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the supervisory authority of your country of residence (e.g., the CNIL in France, the ARTCI in Côte d'Ivoire, or your local data protection authority).