Privacy requests
How to get a copy of your data, correct it, delete it, or opt out. Your documents are never part of this: they are processed in your browser and never reach us, so we have nothing of them to hand over or delete.
What we might hold about you
- If you have an account: your email, name, a salted hash of your password, settings, saved signatures, two-step verification data, signed-in devices, sign-in history for 12 months, and contact messages you sent while signed in.
- If you contacted us: your email address and message.
- Everyone: our host’s request logs (IP address, browser, pages and times). Optional anonymous metrics are daily counts that cannot be linked to anyone, so there is nothing personal in them to return or delete.
- Ad data: only if you accepted advertising cookies, and held by Google and its partners rather than by us.
Do it yourself, right away
| You want to | Where | What happens |
|---|---|---|
| Get a copy of your account data | Sign in, then Account › Your data › Download my data | A JSON file with your profile, settings, saved signatures, signed-in devices, sign-in history and linked contact messages. Password hashes and two-step secrets are left out for your safety. |
| Correct your name or email | Account › Profile | Changes apply at once; a new email address must be confirmed. |
| Delete your account | Account › Your data › Delete my account | You confirm with your password and by typing DELETE. Your profile, settings, saved signatures, devices, sign-in history and linked contact messages are removed immediately, and we email a confirmation. |
| Sign out other devices or forget trusted devices | Account › Security | Ends your other sessions; a separate button makes every device ask for a two-step code again. |
| Refuse or withdraw advertising cookies (Do Not Sell or Share) | Cookie settings in the footer of any page | Ad code stops loading. A Global Privacy Control signal does this automatically. |
| Stop optional metrics | Turn off anonymous metrics in the footer | Your browser stops sending counts and the consent cookie is removed. |
| Remove what’s stored in your browser | Your browser’s “clear site data” setting | Removes our cookies, local storage and offline files from that browser. |
Ask us by email
For anything else (for example a message you sent without signing in, an account you can no longer reach, or a question about our logs), email support@havardsolutions.com with “Privacy request” in the subject. Tell us what you want (access, a copy, correction, deletion or an appeal) and the email address you used with us. Please don’t send documents or ID cards.
- Confirming it’s you: before we release or delete anything, we confirm the request from the email address involved, for example by asking you to reply from it or to sign in. We won’t tell anyone whether an email address has an account here unless they prove they control it.
- Authorized agents: someone can act for you with your signed permission; we will still confirm the request with you directly.
- Timing: we confirm within 10 business days and complete requests within 30 days. If a request is complex we may extend that where the law allows (up to 45 more days under US state laws, or two more months under the GDPR) and will tell you why.
- Cost: free. We may refuse requests that are clearly unfounded or excessive, and will explain why.
What we may keep after a deletion
- A short security record that an account was deleted (the time and the first 16 characters of a one-way hash of the email address), purged after 12 months.
- Information we must keep by law or need to establish or defend a legal claim, kept only as long as that need lasts.
- Copies held by our email provider or in our host’s request logs, which follow their own schedules.
- Data held by Google and its partners, which you can manage at My Ad Center and Google Ads Settings.
If you disagree with our answer
Reply to our answer with “Appeal” in the subject. We’ll respond within 45 days (60 days where state law allows). You can also contact your state attorney general or your local data protection authority. Using your rights never changes the service you get.
More detail: Privacy Policy, US State Privacy Notice, EEA, UK and Swiss Privacy Notice.