This page explains how to exercise your data-subject rights (Art. 15–22 GDPR), including WTFB account deletion. Requests can be made in-app or by email.
1. In-app account deletion
Signed-in users can request account deletion in Profile. Deletion is initiated with email confirmation and a 14-day cancellation window. During this period you can cancel via the link in the email. The link contains a one-time token stored on our side only as a SHA-256 hash. After 14 days the deletion runs automatically.
2. Public GDPR request route
If you cannot access the account, send a request from the email linked to it to [email protected]. Use one of the subjects: «Data access», «Data export», «Data correction», «Data deletion», «Marketing consent withdrawal» or «Integration revocation».
We may request additional data for identity verification (e.g. a recent transaction ID or a security-question answer) if the request cannot be unambiguously matched to an account (Art. 12(6) GDPR). Response time — 1 month, extendable to 3 months for complex cases.
3. What is deleted and retained
- Profile (name, email, avatar, bio, social links, settings) — deleted or anonymised within 30 days.
- Content (projects, tasks, reports, messages) — deleted, anonymised or decoupled depending on role (outgoing vs. counter-party) and public visibility.
- Payment, tax and invoice data — kept for 10 years (§ 257 HGB, § 147 AO).
- Anti-fraud/security logs — up to 12 months; moderation/audit — up to 3 years.
- Email in our suppression list (needed to enforce GDPR deletion and prevent re-marketing).
4. Export, correction, restriction, objection
On request we provide a machine-readable data copy (JSON), correct inaccurate data, restrict processing, accept objection or withdraw consent. Cookie consent is changed via «Cookie settings» in the footer.
5. Connected integrations
Where social / messenger / CRM / OAuth integrations exist, you can disconnect them in the account. If the disconnect UI is not available, contact [email protected] and revoke access directly with the third-party provider as well.
6. Supervisory authority
You may complain to the Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen (Arndtstraße 1, 27570 Bremerhaven), or the supervisory authority in your habitual residence / workplace.
7. Contact
Privacy: [email protected]