This guide explains how to delete your Orgo account, what happens to your data afterwards, and which rights you have over that data. It is published to meet Google Play’s user data deletion requirements and to support your right to have personal data deleted — under Article 17 GDPR in the EU, EEA and UK, and under the CCPA/CPRA in California, the TDPSA in Texas and the equivalent laws of other US states. The deletion process described here is the same wherever you live.
Two different things can be deleted. Your Orgo account is your login and personal profile — you control it. The records your organization keeps about you (membership history, payments, event attendance) belong to that organization, which is the data controller for them. Deleting your account does not automatically erase those records. Section 5 explains how to have them erased too.
Deletion is permanent and cannot be undone. If you want to keep a copy of your content, download it before you start:
This cannot be undone. Once you confirm, your login, profile and personal content are scheduled for permanent erasure. There is no recovery window and no way to restore the account afterwards.
Some organizations do not enable self-service deletion for their members. If you do not see the option in the app, contact the administrator of your organization and ask them to delete your account.
If you cannot use the app and your organization does not respond, email privacy@orgo.space from the address linked to your account, with “Account deletion request” in the subject line. We will verify your identity, act on the request, and reply within one month, as required by Article 12(3) GDPR. Where the data belongs to your organization, we will forward the request to it and assist it in acting on your request.
Access ends at once. Erasure from our systems follows the timetable below, which is the same one set out in Section 8 of our Privacy Policy.
| Data | Examples | When it goes |
|---|---|---|
| Sign-in and credentials | Password hash, session and refresh tokens, social-login bindings, device push tokens | Immediately — you are signed out on every device |
| Personal identifiers | Name, username, profile photo, email address, phone number | Removed from the live service immediately; erased from the production database within 90 days |
| Profile and preferences | Bio, saved settings, language, theme | Within 90 days |
| Your activity and content | Posts, comments, likes, uploaded media, event check-ins | Deleted or anonymized within 90 days, according to your organization’s retention settings |
| Encrypted backups | Disaster-recovery copies, not used to serve the app | Overwritten in the normal backup cycle, up to 90 days |
A small amount of data survives deletion because the law requires it or because we need it to protect the service. We keep only what is necessary for each purpose, and we do not use it to contact you or to build a profile of you.
| Data retained | Why | How long |
|---|---|---|
| Payment and invoicing records | Accounting and tax law (Romanian Law 82/1991); refund and chargeback audits | 10 years, as required by law |
| Fraud and abuse records | Preventing repeat abuse and protecting other users — our legitimate interest under Article 6(1)(f) GDPR | 5 years |
| Server and security logs | Investigating security incidents and keeping the service available | 12 months |
| Records relating to a legal claim | Establishing, exercising or defending legal claims — Article 17(3)(e) GDPR | Until the claim is finally resolved |
These records are held separately from the live service and are not used to provide the app to anyone. Each of these grounds is a recognised exception to the right to deletion under GDPR Article 17(3), the CCPA (Cal. Civ. Code §1798.105(d)) and the TDPSA alike, so the outcome is the same wherever you live.
If you joined Orgo through an organization — an association, NGO, party, scout group, school or similar — that organization is the data controller for the records it keeps about you as a member. Orgo only processes that data on its instructions, as a data processor under GDPR and the TDPSA, and as a service provider under the CCPA. We do not sell your personal data, we do not share it for targeted advertising, and we do not keep or use it for our own purposes.
This has one practical consequence: deleting your Orgo account removes your login and personal profile, but the organization may still lawfully hold membership records, payment history or attendance data about you, under its own retention rules and legal obligations.
To have those records erased as well, address the organization directly. If it does not reply, or you are not satisfied with its answer, write to privacy@orgo.space — we will pass the request on and assist the organization in handling it, as our Data Processing Agreement requires.
You do not have to delete the whole account to remove specific information:
Alongside deletion, you can ask us to confirm what data we hold about you, to correct anything inaccurate, to give you a portable copy of it, to restrict processing, or you can object to processing based on our legitimate interests. Send any of these to privacy@orgo.space.
Exercising a right is always free, and we will answer within one month. We will never discriminate against you for exercising it — your access to the app, the features available to you and any price you pay stay exactly the same.
We will tell you why. You can then reply to our decision to ask us to reconsider, and you can take the matter to a regulator:
The full description of your rights in each of these jurisdictions is in our Privacy Policy, Section 9.
The data controller for your Orgo account is S.C. ORGO INFORMATICS SRL, Str. Gheorghe Grigore Cantacuzino nr. 14, parter, ap. 1, Ploiești, Prahova, Romania. Trade register J29/2796/2019, VAT ID RO41650396.
Full details of how we handle personal data are in our Privacy Policy. Your rights as an app user are set out in the User Terms of Service.