PASSDEED · DATA DELETION · UPDATED JUNE 2026
Data deletion, plainly.
DRAFT — pending attorney review. This page states our intended policy in plain English; it becomes final after legal review and may change.
1. Who can request deletion
The holder of an account's email address can have everything tied to that account deleted. The same applies if you never made an account and only took the free diagnostic: the records tied to the email you entered are deleted on the same kind of request.
2. How to request it
Email support@passdeed.com from the address you want deleted, with the subject “Delete my data”. The from-address is the verification: PassDeed has no passwords, so a request sent from the address itself is how we know it is really you. We cannot act on requests made on someone else's behalf from a different address.
3. What gets deleted
Within 30 days we permanently delete your account, profile, study sessions, question responses, subscription records, analytics tied to your account, and your support messages. Deletion is permanent — there is no undo and nothing for us to restore later.
4. What we confirm by email
Two emails: one acknowledging the request so you know it arrived, and one confirming that deletion is complete, within the 30-day window.
5. What we keep, and why
Two things survive a deletion request. Records the law requires us to keep — Stripe invoices and related tax and accounting records — are retained for as long as the law requires. And de-identified aggregate statistics (for example, the share of candidates who miss a topic) are not personal data: they cannot identify you, so they are not deleted.
6. If a company gave you access
If you use PassDeed through an employer, school, or brokerage, that organization controls its learners' records. Ask the company that registered you — or email us at support@passdeed.com and we will route the request to them.
7. Want a copy first?
Because deletion is permanent, you can ask for an export before you delete: request a copy of your data the same way and we send it as JSON within 30 days. What we hold about you in the first place is described in our privacy policy.