Delete your account.

1. Sign in → /account → scroll to the bottom.
2. Click Delete my account and confirm your email.
3. Account + active data is purged within 60 seconds. Audit logs + legally-required records (see below) follow the retention schedule.

If you can’t sign in, email privacy@orvica.co from the email address on your account. Include:

• The email associated with the account.
• Whether you want full deletion or export-then-delete.
• Optional: reason (helps us improve, fully optional).

We acknowledge within 5 business days and complete within 30 days per CCPA / GDPR Art. 17 timelines.

• Profile (name, email, phone, DOB, emergency contact).
• Helix: medications, refills, appointments, care notes, caregivers, exports.
• LedgerOne: cards, perks, perk-usage history, bills, subscriptions, split records, invoices you sent.
• Volt: merchant profile + custom plan data (Stripe-side records follow Stripe’s retention).
• Passkeys, sessions, push subscriptions.
• Notification history + email log entries.

• Audit log entries — kept for 7 years (financial regulations + dispute defense). Email is redacted; user_id remains for incident reconstruction.
• Email-suppression list— your email stays on the unsubscribe list so we don’t accidentally email you again. (You can request removal in writing.)
• Payment records (Volt) — Stripe retains these per their own schedule; we keep a local mirror for as long as Stripe does, then drop the row.
• Anonymized analytics — PostHog page-view counts with no PII tied back to you.

On deletion we notify our subprocessors (Supabase, Resend, Twilio, Stripe, PostHog) so they purge their copies. See the Trust Center for the full subprocessor list.

Anything unclear or stuck → privacy@orvica.co.