Privacy

Data deletion and erasure

Cancellation and deletion are separate. Authorised users can request account deletion or use scoped identity-erasure controls.

Effective
30 July 2026
Version
1.0

Request account deletion

  1. An owner or authorised administrator emails privacy@goalpush.io from their verified account address.
  2. Include the workspace name and explicitly request deletion. Do not include passwords, secret keys, payment-card data or raw conversion payloads.
  3. GoalPush verifies authority, identifies records subject to legal retention and confirms the deletion scope before processing.

What cancellation does

Cancelling a subscription stops renewal at the end of the paid period; it does not immediately delete the workspace. Operational account data remains available in a restricted state for 90 days after service ends, then is deleted or irreversibly anonymised.

Scoped identity erasure

Authorised owners and administrators can erase eligible private enrichment linked to an email address or E.164 phone number. The workflow removes private enrichment and identity links while retaining anonymous canonical conversion history and non-identifying evidence needed to prove the erasure occurred.

Records that may remain

Financial, tax, transaction and legally required records are retained for at least five years or longer where Australian law requires. Affected records may also remain during a legal hold, fraud investigation or active dispute. Deleted information can persist in encrypted daily backups for up to seven days and weekly backups for up to fourteen weeks, then expires with the backup.

Version history

Version 1.0 — 30 July 2026: initial controlled-launch policy.