Personal data deletion

Right to erasure

Under the General Data Protection Regulation (GDPR), you may request the complete and permanent deletion of your personal data from our platform. We respect this right and use a secure process for it.

Secure deletion process

Deletion uses a two-step process so that only the account holder can confirm it.

• Step 1, start the request: sign in, go to Settings, select “Delete account” and confirm that you are sure.
• Step 2, confirm with the code sent by email: we send a 6-digit code to the account address, which you enter in the same window.
• Step 3, completion: once the correct code is entered, the account and its data are deleted completely and permanently.

Confirmation-code validity

The code sent by email is valid for 10 minutes and allows at most 5 attempts. If it expires, request a new code from the same window. This prevents accidental or unauthorized deletion.

Data deleted permanently

When the process is completed, we permanently remove account information, the password stored as a hash, notifications, conversations with the Codi assistant and any remaining account credits.

Data retained for legal obligations

GDPR Art. 17(3) does not permit erasure of data required to meet a legal obligation. After account deletion, we retain invoices, payment data and paid verification reports (the supporting record of the invoiced service) for 10 years, security logs for one year, and data needed for disputes for the duration of those disputes and applicable limitation periods. This data is kept separately and accessed only for those legal purposes.

Processing period

Under GDPR Art. 12(3), we process the request within 30 calendar days of receipt. In exceptional cases, the period may be extended by a further 60 days with prior notice. The automated process is normally completed immediately after confirmation.

Right to lodge a complaint

If you believe your request is not handled in accordance with the GDPR, you may lodge a complaint with the Romanian data-protection authority (ANSPDCP) at www.dataprotection.ro. Please contact us first at contact@codat.ro.

Alternative to deletion

If you only want to stop receiving marketing communications, adjust notification preferences in your account settings without deleting your verification history.