Data Deletion

Last updated: February 2026

1. How to Delete Your Data

You can request deletion of your personal data at any time using any of the following methods:

  • Self-service: Go to your account dashboard → Settings → Account → Delete Account. This immediately schedules your account and associated data for deletion.
  • Email request: Send a deletion request to privacy@agentactionfirewall.com with the subject line "Data Deletion Request." Include your account email address. We will confirm receipt and process your request within 45 days.

If you are submitting a request on behalf of another person, you must provide written authorization from that person.

2. What Gets Deleted

When you delete your account or submit a data deletion request, we will delete or anonymize the following within duration of your account plus 30 days after deletion:

  • Your account profile (name, email, company)
  • Your organization's policies, configurations, and workflows
  • Agent and API key records
  • Approval workflow templates and pending approvals
  • Team membership records

We recommend exporting your audit logs and any data you want to retain before requesting deletion. Use the export feature in your dashboard (Audit → Export) before closing your account.

3. What We Retain After Deletion

Some data must be retained after account deletion to meet legal, compliance, and security obligations:

  • Audit logs:Retained according to your plan's retention period (Free: 14 days; Starter: 30 days; Pro: 90 days; Enterprise: 365 days) or longer if required by applicable law or an ongoing legal matter.
  • Payment records: Retained for 7 years as required by tax law. Payment instrument details are stored and managed by Stripe and subject to their data retention policies.
  • Security incident records: Retained as required for incident response and reporting obligations.

Retained data is not used for any purpose other than the legal or compliance obligation that requires its retention.

4. Enterprise and DPA Customers

If you are subject to our Data Processing Addendum, we will delete or return all personal data within 30 days of your written termination request, unless applicable law requires longer retention. Contact privacy@agentactionfirewall.com to initiate a DPA-governed deletion.

5. California Residents

If you are a California resident, you have the right to request deletion of your personal information under the CCPA/CPRA. Submit your request to privacy@agentactionfirewall.com with the subject line "CCPA Deletion Request." We will verify your identity and respond within 45 days.

We will not discriminate against you for exercising your deletion rights.

6. Questions

For questions about data deletion or to check the status of a pending request, contact us at privacy@agentactionfirewall.com.