Account & Data Deletion

At Exovia Trade, we respect your right to control your personal data and account lifecycle. You may request the deletion of your user account, organization workspace, or associated personal information at any time.

This document provides clear instructions on how to initiate an account deletion request, how to revoke third-party integrations (such as Google OAuth), and what happens to your data once a request is received.

To request deletion of your account and personal data, please follow these steps:

1. Send an email from the email address registered with your Exovia Trade account to admin@exovia.trade.
2. Use the subject line: “Account Deletion Request”.
3. In the body of the email, please specify:
   • Your full name and registered login email address.
   • Your organization or company name (if applicable).
   • Whether you are requesting individual user account deletion or full organization workspace closure (applicable only to organization administrators).

Our security team will verify your identity before processing the request to protect your organization against unauthorized deletion attempts.

If you connected an email account (such as Google / Gmail or SMTP) to Exovia Trade, you do not need to wait for full account deletion to remove the connection:

• In-App Disconnection: You can disconnect any connected email account at any time by navigating to Organization Settings → Email Accounts in the Exovia Trade dashboard, selecting the account, and clicking Delete Account. This immediately purges the stored OAuth access tokens and refresh tokens from our database.
• Revoke via Google Account Security:You can also revoke Exovia Trade's access directly from your Google Account at any time by visiting https://myaccount.google.com/permissions, selecting “Exovia Trade”, and clicking “Remove Access”. Once revoked, Exovia Trade can no longer access your mailbox.

Once your deletion request has been verified by our administrators:

• Immediate Access Revocation: Your login credentials, active sessions, and authentication tokens will be immediately invalidated, preventing further access.
• Personal Data Deletion: Your user profile (name, personal email, phone number, encrypted password) and personal preferences will be permanently removed from our active production database within 30 calendar days.
• Integration Tokens: Any remaining OAuth credentials, API keys, or email configurations linked to your personal user account will be permanently deleted.

Certain records may be retained for a limited time where required or permitted by applicable law, including:

• Trade and Financial Records: Issued quotations, commercial invoices, shipping documentation, and order execution records created within an active organization workspace belong to the trading organization and may be retained by that organization in accordance with statutory tax, customs, and commercial record-keeping laws.
• Security & Audit Logs: System audit log entries recording transactional actions, timestamps, and IP addresses are retained for security monitoring, fraud prevention, and regulatory compliance.
• Encrypted Backups: Data contained in routine disaster recovery backups will age out and be permanently overwritten in the normal course of backup lifecycle rotations.

If you have any questions about this account deletion policy or need assistance with your request, please contact our support team at admin@exovia.trade.