Account deletion (LGPD)

How it works

Deletion runs in two phases. First, you submit a request with a reason. We immediately revoke all active sessions and lock the account. A 30-day grace period starts during which you can cancel the deletion by logging back in.

After the 30-day window, identifying fields (email, username, country, password hash, 2FA secret) are anonymized and the account is fully deleted. Trade history, ledger entries, and audit events are retained in anonymized form for accounting and regulatory compliance.

What we keep

Trade and order records are retained per accounting compliance — they are required to reconstruct counterparty positions, fee accounting, and resolve any historical disputes. After anonymization the records cannot be traced back to you.

You can download a full export of your data before deletion via /settings/account → Download my data.

Cancelling a request

Log back in anytime in the 30-day window. The auth flow recognises pending-deletion accounts and lets you cancel the request without re-verification. Once you cancel, the account returns to fully-active status.