Deleting your account

Deleting the account takes a moment and does not go through us:

• AnyReplay for iPhone or Android: Settings → Account → Delete account.
• The web dashboard: Settings → Account → Delete account.

You are asked to prove it is you first. An account with a password gives that password. An account created with Google or Apple has no password, so it proves instead that it can read its own mailbox, with a code we send there a moment earlier. An account with two-step sign-in gives both — that is what two-step is for.

The account cannot be deleted while either is true, and the screen says which:

• You are the only owner of an organisation other people still work in. Deleting the account would leave them somewhere nobody can administer or close, so make somebody else an owner — or close the organisation — first.
• An organisation where you are the only member still has a running subscription. Cancel it where it was bought, in your App Store or Google Play account, then come back.

The account itself, and with it the name and email address on it, the sign-in methods linked to it, and every session it has open — you are signed out everywhere at once. An account created with Apple is revoked at Apple too, so it no longer appears under your Apple ID.

An organisation where you were the only member is deleted with the account, and everything in it: its projects, its recordings and their stored chunks, its Argus summaries and analyses, its notes and its invitations. Otherwise the organisation stays — its other members keep working, and their recordings are not yours to delete.

The service stops serving deleted data at once. It does not vanish from every copy in the same instant, and we would rather say so plainly: a recording already in object storage is hidden immediately and its previous versions expire within seven days, and our encrypted off-site backups are kept for thirty days before they roll off. That window is what makes a backup a backup — it is also why “deleted” here means deleted from the service now, and gone from the last copy within a month.

• Entries in an organisation’s audit log stay, with your name replaced by “Deleted user”. The organisation still needs to know what was done in it, and by then nothing in the entry identifies you.
• If your address was on our suppression or unsubscribe list, that row stays. It exists so that nobody writes to the address again — deleting it would undo the very thing it was for.
• Billing records behind an organisation’s payments are kept for accounting, with the organisation’s identifier removed. They hold what the payment provider sent us about a charge.

An owner can close an organisation from the dashboard. Closure takes effect after a thirty-day grace period, during which any owner can cancel it; after that the organisation and everything in it is deleted. Nothing is deleted the moment you ask — that delay is deliberate, and it is there so a closure made in error can be undone.

Write to [email protected] from the address on the account and ask for it to be deleted. We will check that the address is yours and do it; expect an answer within thirty days, and usually far sooner. Please say which it is — an account, or a recording somebody made of you — because they are different requests with different answers.

If you believe a site recorded you and you want that recording deleted, the request goes to the site that recorded you: the recording belongs to them, they decide what happens to it, and we act on their instruction. If you cannot reach them, write to [email protected] and we will help you find who to ask. The privacy policy describes what a recording can contain and what is never recorded at all.