Account Deletion

1. Request deletion

Use Delete account in the app or dashboard Settings where available. You may also contact privacy@ierasmus.app or support@ierasmus.app from the account email. Do not send passwords, ticket QR codes or identity documents unless we provide a protected verification route.

2. Identity and scope

We may verify control of the account and ask which service or organizer profile is involved. This protects accounts from unauthorized deletion. A request can cover the profile and personal data while some transaction or event records follow separate legal obligations.

3. Effects

• Access and active sessions are revoked as deletion is completed.
• Personal profile and optional content are deleted or de-identified when no lawful retention reason applies.
• Organizer publishing and plan access end; cancelling renewal and requesting account deletion are separate actions.
• Orders, refunds, admissions, accounting and security evidence may remain for fulfilment, attendee protection, disputes or law.
• Stripe merchant or payment records are also governed by Stripe and financial obligations.
• Protected student-card data and contributed files follow their specific deletion and verification workflows where those features were used.

4. Timing and confirmation

We respond to GDPR requests normally within one month. If a permitted extension is needed, we will explain it within the first month. Technical removal can continue through restricted backups until normal overwrite, without restoring data to active use.

5. Lawful limits

We may retain specific records required for tax, accounting, fraud prevention, safety, legal claims or another lawful obligation. We will not use retained records for unrelated purposes and will explain relevant limits in the response.