Your data rights & deletion

You can request access to, correction of, export of, or deletion of your personal data held by OctaByte XTK. This page explains how, and how it differs depending on whether you are a practice or one of a practice’s clients.

Delete data yourself

• Documents live in your connected Google Drive / OneDrive. Deleting them there removes them from your storage provider.
• Requests, signatures and portal data can be removed from within the portal and extension.
• Team members can be removed by your Admin.

Close your account

To delete your Practice and the account data we hold, either:

1. Cancel your subscription and request closure from account settings; or
2. Email support@octabyte.io from your account email with the subject “Delete my account”.

What we delete

• Your account, profile and authentication data.
• Encrypted OAuth tokens for connected storage and mail providers.
• Practice records, requests and signature metadata we hold on our backend.

Documents already stored in your own Drive/OneDrive stay under your control there — closing your XTK account does not delete files in your storage provider.

What we may keep

We may retain limited records where required by law (for example, billing and tax records) or to resolve disputes and enforce agreements. Backups are purged on our normal rotation. Anything retained is protected and access is restricted.

Timing

We aim to action verified deletion requests within 30 days. We may need to verify your identity first to protect your data.

Other rights

Depending on your location you may also have rights to access, correct, port, restrict or object to processing. See the Privacy Policy for the full description, and contact support@octabyte.io to exercise any of them. You also have the right to complain to your local data protection authority.