Data Deletion Policy

Via email

If you cannot access the app, send a deletion request to privacy@sharpenedeye.io from the email address associated with your account. Include the subject line: Account Deletion Request. We will verify your identity and confirm deletion within 5 business days.

What to expect

You will receive an email confirmation within 24 hours of initiating deletion. Your account will be immediately deactivated — you will be signed out of all sessions and your shareable links will stop working. The full deletion process completes within 30 days.

Upon account deletion, the following data is permanently removed from our systems within 30 days:

• Your email address and account credentials
• Your display name and profile information
• All session metadata (titles, timestamps, sync accuracy records, annotation data)
• All cloud-stored video files in Cloudflare R2
• All shareable session links and associated access tokens
• Workspace membership records and associations
• Notification preferences and history
• Usage analytics events linked to your account identifier

Once deleted, this data cannot be recovered. We do not maintain backups of deleted personal data beyond the retention periods described in section 3.

We are required by law or legitimate business necessity to retain the following data after account deletion:

• Billing records and invoices — retained for 7 years from the transaction date to comply with financial and tax regulations. This includes subscription history, payment amounts, and Stripe transaction identifiers. Your payment card details are never stored by us.
• Fraud and abuse records — if your account was suspended for violations of our Terms of Service, we may retain a minimal record (hashed email, violation type, date) for up to 3 years to prevent re-registration and protect other users.
• Legal hold — if your data is subject to a legal hold or law enforcement request, deletion may be suspended for the duration of the hold. We will notify you where legally permitted to do so.

Here is exactly what happens and when, after you request deletion:

• Immediately — Account deactivated; you are signed out of all sessions; shareable links stop serving video.
• Within 24 hours — Email confirmation sent; login with your credentials becomes impossible.
• Within 7 days — Session metadata removed from our primary PostgreSQL database.
• Within 30 days — Video files deleted from Cloudflare R2; anonymised usage records purged from ClickHouse; Stripe customer record anonymised (billing records retained separately for 7 years).
• Within 90 days — Any residual data in backup snapshots is overwritten as part of our standard backup rotation.

Your video recordings stored in Cloudflare R2 are deleted within 30 days of account deletion. This includes:

• Raw uploaded MP4 files (Stream A and Stream B)
• HLS-transcoded renditions and segment files
• GIF preview files
• Any exported side-by-side MP4 files stored in cloud

Video files stored on your local device (in ~/.sharpenedeye/sessions/) are not deleted by us — they remain on your device and are your responsibility to manage. The desktop app provides a session management interface to delete local recordings.

When you delete your SharpenedEye account, we will request deletion of your personal data from the following sub-processors on your behalf:

• Stripe — we anonymise your Stripe customer record. The underlying billing transaction records are retained by Stripe as required by financial regulations.
• Knock — your notification history and preferences are deleted from Knock's systems.
• Postmark — individual email delivery records are deleted per Postmark's standard retention policy (45 days).

We cannot guarantee deletion from all third-party systems outside our control (e.g., email clients that received notifications from us). For these cases, you may need to contact the relevant service directly.

For all data deletion requests and enquiries:

• Email: privacy@sharpenedeye.io
• Subject line: Account Deletion Request
• Response time: Confirmation within 24 hours; completion within 30 days

If you have a complaint about how we handled your deletion request, you have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK, the CNIL in France, or the AEPD in Spain).