Account Deletion

1. What this page does

This page explains how to request deletion of an Autoentic account and the personal data tied to it. It is the public web URL Autoentic provides to satisfy the Google Play account-deletion policy, so you can request deletion without first installing or signing into the Autoentic Android app.

2. Who can submit a deletion request

Autoentic is a B2B service, so different roles can request different scopes of deletion:

• Partner organization administrators. May request deletion of the entire organization account, all Authorized Users (technicians) under that organization, and the inspection sessions associated with the organization.
• Authorized Users (technicians). May request deletion of their personal data — name, technician phone number, login records — without affecting the partner organization account they work under.
• Vehicle owners. Individuals who booked an inspection through autoentic.com may request deletion of the booking contact information and payment details associated with their booking.

A note on how the data is held. Inspection records submitted by a partner organization are the organization's data; Autoentic processes them on the organization's behalf. An individual Authorized User (technician) requesting deletion of their personal data does not delete the inspection records themselves — those records remain the organization's data and are retained per its own policies. The technician's name, phone number, and login records are removed from those records as part of the deletion.

3. Before you submit a request

None of the following steps are required, and Autoentic will not delay or refuse a deletion request because of any of them. They prevent surprises and are worth a few minutes before you click submit.

• Download a portable export. You may request a copy of your account's measurement and inspection data per Section 8 of the Privacy Policy. Once deletion is complete, exports are no longer possible.
• Partner administrators — transfer ownership first. If your organization intends to keep operating after you leave, transfer organization ownership to another administrator before requesting deletion of your personal account. A request to delete the entire organization is permanent and removes access for all of its Authorized Users (technicians).
• Authorized Users — finish or discard in-flight sessions. If you have an inspection session open in the app, complete or discard it before requesting deletion. Sessions still in progress at the time of deletion are discarded along with the account.
• Vehicle owners — resolve open bookings. Confirm that any inspection bookings are completed, rescheduled, or cancelled. Deletion does not extinguish unpaid amounts; outstanding billing obligations survive account deletion. Autoentic does not condition or delay deletion on payment.

4. How to request

Three options are available, listed in order of speed:

1. Delete specific personal data without closing your account. If you want to remove certain personal data — for example, your phone number, login records, or Sentry crash reports — but keep your account active, email [email protected] with the subject "Account Deletion Request" and indicate which data categories you want removed. Partial-data deletion follows the same verification and timeline described below.
2. From this page. In this initial version, requests submitted from this page are handled by email. Send a message to [email protected] with the subject "Account Deletion Request". A self-service web form will replace this step in a later release.
3. By email directly. Email [email protected] from the address on file for your account, with the subject "Account Deletion Request". Include the role you are writing in (partner administrator, technician, or vehicle owner) and, if you are a partner administrator, the name of your organization.

5. What happens next

Autoentic verifies every deletion request before any data is removed. The primary check is a confirmation reply to the email address of record on the account. For partner organization administrators, we may also ask you to confirm a second piece of information — for example, the serial number of a registered DeFelsko probe, your organization's billing email, or the ID of a recent inspection session — to make sure the request actually comes from someone authorized to delete the organization.

If you no longer have access to the email address of record (for example, a technician whose work email was deactivated when they left a shop), email [email protected] from any address you control and describe the situation. We will offer alternative verification appropriate to the circumstances.

Verification typically completes within 7 days of receipt. Once verified, deletion completes within 30 days, in line with our commitment in the Terms of Service. For unusually complex requests — for example, a partner organization with many Authorized Users or multi-organization dependencies — we may extend that period once by an additional period not to exceed 30 days, in which case we will notify you within the initial 30-day window with the reason for the extension.

6. What gets deleted

Subject to Section 7 below, a verified deletion request removes the following:

• Account profile data. Name, email address, phone number, password and other authentication records, and billing contact details.
• Inspection session payload data. VINs, decoded vehicle metadata, and per-panel paint thickness measurements associated with the account, subject to the chain-of-custody exception in Section 7.
• Sentry crash reports. Diagnostic events and breadcrumbs tied to the user.
• SMS opt-in records. The mobile number consent record stored alongside the technician profile, subject to applicable telecommunications recordkeeping (see Section 7, "Records required by law").
• VIN OCR images. These are already discarded transiently after decoding, per Section 3 of the Privacy Policy; they are listed here for completeness.
• Sub-processor copies. Autoentic propagates verified deletion requests to the third-party sub-processors that hold data on our behalf — including Hetzner, Coolify, Twilio, Resend, Sentry, n8n, Marketcheck, Google Gemini Vision, and Stripe — as listed in Section 6 of the Privacy Policy. Each vendor then deletes the data it holds on our behalf according to its own deletion procedures.

7. What is preserved (chain-of-custody exception)

A small set of records is retained even after a verified deletion request. This is a deliberate feature of the Service, not an accident: a buyer in 2034 must still be able to verify a Certification Artifact issued in 2026. See Section 13 of the Terms of Service for the contractual basis.

Where the Texas Data Privacy and Security Act applies, this retention rests on Tex. Bus. & Com. Code §§ 541.201(a)(3) (defense of legal claims) and 541.201(a)(4) (performance of contract). Where the GDPR applies, this retention rests on Article 17(3)(e) (establishment, exercise, or defence of legal claims). Where the California Consumer Privacy Act applies, this retention rests on Cal. Civ. Code §§ 1798.105(d)(1) (transaction completion / warranty), 1798.105(d)(2) (security and integrity), and 1798.105(d)(8) (legal obligation).

• Hash-chain entries and validation metadata. The cryptographic hash-chain entries and the minimal metadata required to validate previously issued Certification Artifacts are retained indefinitely. The retained records do not contain personally identifiable information beyond what is strictly required to validate an artifact.
• Aggregated, de-identified analytics. Aggregated and de-identified analytics that have already been produced from your data, and that cannot reasonably be linked back to you, may be retained.
• Records required by law. Records that Autoentic must retain for legal, tax, accounting, telecommunications-consent (47 U.S.C. § 227 and 47 C.F.R. § 64.1200), or fraud-prevention reasons may be retained for the period required by applicable law.
• Records of deletion requests. A minimum record of the deletion request itself — the fact that a request was made, the date, and the verification outcome — is retained for approximately 24 months as required by Cal. Code Regs. tit. 11 § 7101 and Tex. Bus. & Com. Code § 541.052(f). This record contains no measurement, vehicle, or session content.

8. Regional rights notice

Residents of the European Union, the United Kingdom, and California may have additional non-waivable statutory rights regarding deletion — including the GDPR Article 17 right to erasure and the CCPA right to delete. Those rights are honored regardless of the Texas governing-law clause in our Terms of Service. For details on the regional rights we recognize and how to exercise them, see Section 10 of the Privacy Policy.

Residents of the European Union and the United Kingdom additionally have the right to lodge a complaint with their national data protection supervisory authority if they believe Autoentic has not handled a deletion request properly.

9. What you should expect to receive

You will receive a confirmation email when your request is received, and a second confirmation email when deletion is complete. If we are unable to fully delete some data because of the chain-of-custody exception in Section 7 or another legal-retention requirement, the second message will explain what was retained and cite the specific reason.

If we decline a deletion request in whole or in part, you may request human review by replying to that explanation message. A member of the Autoentic team — not an automated system — will reconsider the request. Human review is completed within 60 days of receipt of your appeal. If your appeal is denied in whole or in part, you may submit a complaint to the Texas Attorney General at the online mechanism the Office maintains under Tex. Bus. & Com. Code § 541.152 (texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights), and (if applicable) to your national or state data protection supervisory authority.

10. Contact

For deletion requests and questions about this page: