Delete your account and data

1. Before you delete

• Download a copy. On your profile page you can export your account data: your memory items, the recent activity of your devices, the conversation journal if you turned it on, and your billing contracts. After deletion we cannot give it back.
• Plans. Deleting the account ends any paid plan straight away, and we ask Stripe, our payment provider, to delete the customer record. If you want to use the time you have already paid for, wait before you delete.
• Hubs and devices. The hubs you own are removed, along with the phones and other devices connected to them and the access rules you set. People who used your hubs lose access.
• Organisations. An account that runs a Work organisation with devices that Thalovant manages for it cannot be deleted from the dashboard. Write to us and we will sort out the devices with you first.
• Phones. Deleting your account does not clear the apps on your phone. To delete saved conversations on the phone, turn off conversation history in the app's Settings before unpairing. Then unpair in the app to remove the hub connection and its saved alarms from the phone. Unpairing alone does not erase saved conversations.

2. Delete your account when you are signed in

1. Sign in at dash.thalovant.com. If you go to your profile page while signed out, the dashboard sends you to the sign-in page first.
2. Open your profile page and find Delete account in the danger zone at the bottom.
3. Type your current password and your full email address to confirm, then confirm.

The account is deleted as soon as the password is accepted. Every session on every device is signed out.

3. If you signed up with Google or GitHub

The deletion form asks for your current password. An account created with Google or GitHub may not have one. You can set one in a minute:

1. On the sign-in page choose Forgot password (dash.thalovant.com/auth/forgot).
2. Enter the email address of your account. We send a link that works for one hour.
3. Choose a password, then follow section 2.

Accounts that belong to a company sign-in (single sign-on) have no password to set. For those, write to us as described in section 4, or ask your organisation's administrator.

4. If you cannot sign in, or would rather ask us

Email privacy@thalovant.com. You can also write to the Privacy Officer, Thalovant Technologies Inc., 2727 rue Saint-Patrick, Montréal, Quebec H3K 0A8, Canada. Please:

• write from the email address of the account, so we can check the request is yours. If you write from another address, we may ask you to prove that you control the account;
• put "Delete my account" in the subject;
• say how you sign in (password, Google, GitHub or company sign-in), and the names of your hubs if you remember them;
• tell us if you want a copy of your data first;
• never send a password, a recovery code or a payment card number.

Our commitment: we reply within 5 business days to say we have your request and what we need, if anything, and we finish within 30 days. We extend that period only where applicable law permits it, and tell you why before the 30 days are up. We delete the account in the same way as in section 2 and write to you when it is done.

A parent or guardian can ask us to delete a teen's account in the same way. Tell us you are the parent or guardian and the email address of the account.

You used a hub without your own account. A phone can connect with a setup link or a scanned code without its user creating a Thalovant account. Unpair it in the app. The hub's owner manages the hub and its retained records; that does not remove your rights over your personal information. Write to us about removing the phone's connection or requesting deletion, and we will help identify the responsible hub owner where needed.

5. What is erased

When an account is deleted, we erase:

• The account itself: your email address, name, password (stored only as a hash), two-step sign-in settings and recovery codes, sign-in history, security alerts, saved devices, API tokens, and every session.
• Your hubs and their connections: the hubs you own, their connected phones and devices, and the access rules, removed from our systems and from the hubs' running configuration.
• Memory items you asked a hub to remember.
• In-app answer reports about your hubs held in our reporting system, matched by the hub's identifier or connection host. Copies already emailed to support are separate and follow section 6.
• Activity and usage records linked to you: the latest and past activity of your devices, including any utterance text kept on a paid hub, and the usage counts, session summaries and audit entries tied to your account, devices and hubs.
• The conversation journal of your hubs and devices. We delete it when the account is deleted. If the journal service cannot be reached at that moment, the journal expires on its own within 30 days at most.
• Your customer record at Stripe. We ask Stripe to delete it, which also ends any subscription. Stripe keeps what it must for payments and tax.

We keep a bare note that an account was deleted. It names nobody.

6. What we keep, and for how long

Some records are controlled by other organisations. The company that provides your phone's speech recognition (often Google on Android, Apple on iPhone), Siri, and the phone's place-name service handle what they receive under their own terms. A radio or news site you played may have seen your phone's IP address. A review you left in Google Play or the App Store stays with that store. For a hub run by an organisation, such as a library or a shop, ask that organisation about its records; we will assist with requests for data we process on its behalf. See the Privacy Notice and privacy rights by region.

7. When it happens

• Signed in: the moment you confirm. The records in section 5 are erased in the same step, apart from the journal case in section 5.
• By email: after we have checked the request, within the times in section 4.
• No grace period. We do not hold an account for 30 days, and there is no 30-day export period after deletion. Export first (section 1).
• Backups and the records in section 6 follow the times shown there.

8. Questions and complaints

Write to privacy@thalovant.com. If you are not satisfied with our answer, privacy rights by region says which authority you can turn to where you live.