Delete your account

The short version

• Delete account is a button in the app and in the web console. You do not need to contact us, and you do not need to reinstall anything.
• It takes effect immediately and cannot be undone. There is no grace period and no undo, so download your data first — Export is a button in the same place.
• Your account is closed, your email address is replaced with a non-address, and the account can never be signed in to again.
• Some things are kept on purpose, and this page names all of them: your consent receipts, the other party’s side of an introduction or a thread, billing records, our audit log, and the market aggregates other members read.
• The button does not reach everything. Around twenty categories — your assistant and Meridian conversation history, push tokens, usage events, match results and derived metrics among them — are removed only by the fuller erasure we run on request. Email hello@promoteglobal.org and ask for it.
• Deleting your account does not cancel a paid subscription. Cancel it first, in the store or portal that sold it, because deleting removes your way of signing back in.

Who this is

Promote:Global is published by PromoteGlobal, LLC, a Florida limited liability company registered at 7901 4th St N, STE 300, St. Petersburg, FL 33702, United States. This page covers the Promote:Global apps on Google Play and the App Store, the web console at app.promoteglobal.org, and the account behind all three — they are one account, and deleting it anywhere deletes it everywhere.

You can reach a person at hello@promoteglobal.org. Our privacy policy is at promoteglobal.org/privacy and describes everything we hold, not only what deletion touches.

How to delete your account

• In the Android app: open Profile, scroll to the bottom, and tap Delete account. It has a card of its own, last on the page, deliberately not next to Sign out. You are shown exactly what is deleted and what is kept, and you confirm once more.
• In the iOS app: the same place and the same words — Profile, its own section, last on the page.
• In the web console: sign in at app.promoteglobal.org, then Settings, then Account, then Delete account.
• By email, if you would rather not use the button, or if you want the fuller erasure described below: write to hello@promoteglobal.org from the address on the account and ask us to delete it. We answer privacy requests within 30 days.
• You do not have to reinstall the app to do any of this, and you do not need an active subscription.

Before you delete: two things the button will not do for you

Deleting your account does not cancel a subscription, and does not refund one. Nothing in the deletion path touches billing. A subscription bought inside a mobile app is canceled in that store’s own subscription settings — Google Play, or the App Store — and a card subscription bought on the web is canceled in the billing portal in the web console. Do that first: once the account is deleted you cannot sign in to reach the portal, and a store subscription keeps renewing until you stop it in the store.

If you are the only administrator of an organization that still has other members, the app will ask you to transfer it to another administrator before you can delete. That guard exists so your colleagues are not stranded with a workspace nobody can administer. Transfer it in the web console, then delete.

What deleting removes

• Your public listings, and your service-provider listing if you had one.
• Your memberships: the company workspaces, agencies and chamber cohorts you belonged to.
• Every file you uploaded, including the stored bytes at our file provider, not only the references to them.
• Your notifications.
• Every sign-in session, revoked on the spot, so the app you are holding is signed out immediately; and any unused sign-in link already sitting in your inbox.
• Your identity on the account itself: the email address is replaced with a non-address that cannot receive mail or be signed in with, and your display name is removed.
• On an Android handset, the local copy as well: the app clears the account’s cached records, its stored preferences and the on-device trade cache, whose file names are themselves your product codes and corridors. On iOS deleting signs the device out, which clears the account’s cached data on that handset.

What is marked deleted rather than erased

Your vault — your markets, projects, products, deals, documents and notes — is marked deleted rather than removed from the database. It stops being readable in the product, it is gone from every screen and every search, and nothing brings it back for you. But the rows are still there, and we would rather say that than describe a removal we do not perform. The fuller erasure below does remove them.

Records tagged to a company workspace that still has other people in it stay with that company. They belong to the company, not to the member leaving, and a colleague’s work must not disappear because somebody else closed their account. If you are the last member of a workspace, your own records there are marked deleted along with your personal ones — records written by a member who left earlier are theirs, not yours, and stay.

The workspace itself, and any agency or cohort you belonged to, stays standing. An organization is not a person, and dissolving one because a member left would take away the other members’ workplace.

What the button does not reach, and the erasure that does

There are two deletions in this system and they are not the same size. The button is the one you can run yourself, immediately, with no one in the loop. The fuller one is run by a member of our staff against a table that classifies every table in the database, and it reaches categories the button leaves alone. We are naming them rather than summarizing them, because a list of two where there are twenty is the kind of accuracy that is worse than silence.

The button does not automatically reach: your assistant and Meridian conversation history, including the questions you typed in your own words; the model-written summaries about your business and the record of which recommendations you were shown, opened or dismissed; your device push tokens; product-usage and onboarding events recorded against your account; your account’s activity stream; the daily metric snapshots derived from your records; your match results, meaning the counterparts surfaced to you, the reasoning shown with them and any note you wrote on one; the text of messages you sent; support requests you filed, their attachments’ file names and a practice’s internal note about you; documents and answers you filed on a financing case; a partner application you sent before you had an account, with the correspondence on it; content you reported and the note you wrote on the report; a short quote of your own words captured when an AI guard declined a request; your saves, investment interests, read receipts, event RSVPs, access grants and shares; and notes another member wrote about you.

Write to hello@promoteglobal.org and ask for the full erasure, and we run the one that reaches all of it. We would rather you did not have to ask, and we are closing the gap in the product; until it closes, this page says so instead of implying otherwise.

What is kept even then, and why

Some records survive both deletions. Each of these is either evidence we are required to be able to produce, or somebody else’s record that our member does not get to remove.

• Your consent receipts and the consent log. They are the proof of what you were asked and what you answered, and erasing them would erase the evidence that your consent existed. This is the exception European law makes for records needed to establish or defend a legal claim.
• The other party’s side of two-party history: introductions, structured requests and their status trail, the shape of message threads, financing cases and their events, advisory engagements. A counterpart keeps their own record of a conversation they were half of. Where we run the full erasure, your words inside those records are removed and the skeleton the other party relies on stays.
• Billing and subscription records, because they are financial records and tax law requires us to hold them.
• Our administrative audit log, including the record of your deletion itself. An erasure is audited like every other administrative action.
• The corridor and market signals other members’ aggregates are computed from. Pulling one account’s rows out of a market statistic would silently restate the market for everyone reading it. These are deleted on their own schedule, 24 months after they are written, by an automated weekly sweep.
• Listings of public officials and the staff rosters agencies publish about their own people. Those are other people’s personal data, published by their institution, and one member’s account deletion is not the way they come down. If you are named in one and want out, write to us and we will take you out of the directory.

A word we are not going to fudge

Everything in the list above is kept against an account whose identity fields have been overwritten. The row is still there, because every other record in the database points at it and removing it would break records that belong to other people; what it no longer carries is your name or your email address.

That is pseudonymized, not anonymous. Someone with our database and enough context could still reason about which account a retained row belongs to. We would rather write that sentence than claim an anonymization we do not perform.

How long it takes

The button is immediate. The whole sequence runs as a single database transaction, so it either completes or does not happen at all — there is no half-deleted state you could be left signed in to. Your session dies as it finishes.

The email route has no automated timer, and we are not going to publish a turnaround the code does not enforce. A person runs it. What we do commit to is the commitment already in our privacy policy: we answer privacy requests within 30 days.

Copies that are not the live database — our provider’s point-in-time backups and any derived copy — are gone within 30 days. Those backups exist on a short rolling window and are overwritten in the ordinary course.

The market signals described above are the one category with a longer clock: 24 months from when each one was written.

If something here is wrong

This page is written from the code, not from a template, and the code moves. If you delete your account and find something we said would go that did not, tell us at hello@promoteglobal.org and we will fix both the data and the page. Our privacy policy at promoteglobal.org/privacy carries the fuller account of what we hold, on what basis, and for how long, and your rights to access, correct, object to and complain about any of it.