Account Deletion

Who can delete an account

Any ZeroKVault account holder can delete their own account at any time. Deletion is self-service — no support ticket, approval, or waiting period to start the process. Beneficiaries cannot delete the account holder's account; only the account holder can.

How to delete your account (signed-in path)

From a signed-in browser session at https://www.zerokvault.com:

• Open https://www.zerokvault.com/app/settings.
• Scroll to the Danger Zone section at the bottom of the page.
• Click Delete account. A confirmation dialog will appear with a warning and a 30-day grace-period notice.
• Type your account email address into the confirmation field. The confirm button activates only when the typed email matches the address on the account.
• Click Delete account in the dialog to confirm.

After confirmation, your session is invalidated and you are signed out. The deletion is recorded immediately on the server.

What gets deleted

Deletion removes the following from our servers:

• Active subscriptions — any active Stripe subscription tied to your account is canceled at the time of deletion.
• Account record — the user row, including your email address and account metadata.
• Vault data — every vault item you created, including encrypted ciphertext and wrapped data-encryption keys.
• Beneficiaries and capsules — beneficiary records and time-capsule entries you configured.
• Devices — every device record (web browsers and mobile apps) associated with your account.
• Push notification tokens — any tokens registered by the mobile app for delivery reminders.
• Sessions and refresh tokens — every active or pending session is invalidated. The mobile app will be signed out the next time it contacts the server.

What is retained

After the 30-day grace period (see the *Timing* section below), no personal data is retained by ZeroKVault. We do not keep encrypted vault content, account metadata, devices, push tokens, or sessions.

Stripe billing records are owned by Stripe and governed by Stripe's privacy policy at https://stripe.com/privacy. ZeroKVault does not control or retain those records.

Timing

• Immediately on confirmation: your account is deactivated, all sessions are invalidated, and active subscriptions are canceled. You can no longer sign in.
• During the next 30 days: the account is in a grace-period state. If you change your mind, write to support@zerokvault.com from the email on the account and we can reverse the deletion.
• After 30 days: a scheduled job permanently purges all account data. Reversal is no longer possible past this point.

The 30-day window exists to protect against accidental or coerced deletion. It is a one-shot reversal window, not a long-term soft delete — once the purge runs, the data is gone.

Cannot sign in? Email fallback

If you cannot sign in to use the self-service path above — for example, you have lost access to your email or your second-factor device — write to support@zerokvault.com from the email address on the account, with the subject line "Account deletion request." We will verify your identity and process the deletion on your behalf.

This email channel is a fallback for genuine access issues. The signed-in path is the primary, faster route — please use it whenever possible.

Email: support@zerokvault.com