GDPR & Data Privacy

How RocketVerifier handles personal data, retention policies, and your rights under GDPR and other privacy regulations.

What Data We Store

Each account has a configurable dataRetentionDays setting (default: 90 days). Verification email rows older than this window are automatically purged by a daily retention job.

Export all personal data associated with your account. This satisfies GDPR Article 20 (right to data portability).

// Authenticated session required (dashboard cookie)
fetch("/api/user/gdpr")
  .then(res => res.json())
  .then(data => {
    const blob = new Blob([JSON.stringify(data, null, 2)], { type: "application/json" });
    const url = URL.createObjectURL(blob);
    const a = document.createElement("a");
    a.href = url;
    a.download = "rocketverifier-data-export.json";
    a.click();
  });

You can also trigger an export from Dashboard → Billing → Export My Data.

Permanently delete your account and all associated data. This satisfies GDPR Article 17 (right to erasure). This action is irreversible.

// Authenticated session required
fetch("/api/user/gdpr", { method: "DELETE" })
  .then(res => res.json())
  .then(data => console.log(data));
// { "success": true, "message": "Account deleted" }

Your Rights