How to request deletion

Submit the form below or email privacy@invytx.com with the subject "GearLedger account and data deletion request." The response is intentionally generic and does not reveal whether an account exists.

Email used for GearLedger Request type Delete my individual account/data Request deletion of my organization I understand that email alone does not authorize deletion and that GearLedger must securely verify the request before scheduling any irreversible deletion. Request deletion verification

What we verify

Invytx will verify the requester and the organization context before taking action. Individual account deletion requires secure account verification. Organization deletion requires an active organization owner, recent authentication, and explicit irreversible confirmation.

What can be deleted

For an individual account, eligible Auth account records, profile details, invitations, session records, personal files, personal exports, and personal signature images may be deleted at purge time. Historical organization-owned records are de-identified where accountability history must remain.

What happens after verification

A verified deletion request immediately disables normal account access and synchronization. GearLedger then provides a secure opportunity to export applicable data for seven days. At the end of seven days, deletion executes automatically and irreversibly. There is no application-level recovery method after purge.

Account deletion is not membership removal

Removing someone from an organization stops their membership but does not delete their Supabase Auth account. Deleting an account is a separate irreversible privacy request. Organization administrators cannot delete another person's Auth account through ordinary user administration.

What may be retained

GearLedger is an equipment-accountability system. Inventory, checkout, check-in, signature, export, and audit-history records may need to be retained for accountability, dispute resolution, security, legal, or business-record reasons. When deletion is not possible, access is restricted or personal identifiers are minimized where appropriate. Residual encrypted disaster-recovery backups may retain deleted information until the infrastructure provider's normal backup-retention period expires, and such data must not be intentionally restored to active service.

Timing

Invytx will respond to deletion requests after verification and will explain any retention requirement that prevents complete deletion.

Privacy policy

Read the full GearLedger Privacy Policy at invytx.com/privacy.