Your right to erasure
Under GDPR Article 17 you can request deletion of your personal data at any time. We honour valid requests within 30 calendar days.
How to request
Email privacypolicy@photonspark.com from an address associated with your account, containing:
- Scope: "delete my account and all associated personal data," or specifying particular data (e.g. CCTV recordings from a specific date).
- A reasonable identity reference (account number, recent invoice ID, primary domain).
We confirm receipt within 2 business days, verify identity, and proceed or come back with questions.
What we delete
- Your account record.
- Service-specific data: hosted files, databases, VitalSpark/SparkTranscript tenants, custom-project artifacts.
- Backups containing that data (purged on the next backup rotation, max 30 days).
- Support tickets (anonymized — we retain technical content for institutional knowledge but strip identifying details).
What we are legally required to retain
After deletion, these remain in our records for the periods set by Romanian and EU law:
- Invoices and fiscal documents — 10 years (Romanian fiscal law).
- AML records (where applicable) — 5 years.
- Records of the deletion itself — kept indefinitely as proof we honoured the request.
These retained records are not used for any other purpose.
Active service contracts
Deletion implies termination. We discuss notice periods and any final invoice in the same exchange. You are not charged for service after the termination date.
Data export before deletion
Ask in the same email if you want a copy. We provide a one-time export at no cost (usually a ZIP of relevant files plus a JSON of database records).