GDPR Article 17 — Right to erasure ('right to be forgotten')

Erase my data

You can ask us to delete every piece of personal data we hold about you. Tell us the email you used and we'll handle the rest within 30 days, as required by GDPR Article 12(3).

What happens next

We email a confirmation link to the address you enter. Your data is deleted only after you open that link — this is what stops anyone else from erasing your data by typing in your email. Once confirmed, we run the deletion across our agent (PostgreSQL), email provider (Resend), payment processor (Stripe customer object), and storage (palm photos, if any). Anything kept for legal accounting reasons is anonymised.

The address you used when you ordered a reading or signed in.

Helps us improve. Not required and not stored beyond the response.