What Actually Happens to Your Data When You Hit Delete?
Deleting an account isn't always the end. Live systems, backups, shared copies and AI training explained, plus your deletion rights under the CCPA and GDPR.
You tap "Delete account," get a polite goodbye email, and assume it's over. Often it isn't. Deleting data is a process with several layers, and companies differ enormously in how far they take it. Here's what really happens — and what to ask.
The four places your data lives
- Live systems. The database and file storage the app uses every day. A good company removes your data here right away.
- Backups. Copies kept so the company can recover from an outage. Backups usually can't be edited one record at a time, so your data stays in them until they expire. The honest answer is a stated schedule — for example, "within 30 days."
- Copies shared with others. If an app shared your data with advertisers, analytics companies or data brokers, deleting your account doesn't pull those copies back. Each of those companies has its own retention policy.
- What was learned from it. If your content was used to train an AI model or build an advertising profile, the patterns learned from it can outlive the original files.
That's why the most important privacy decision happens before you upload anything: data that's never shared or used for training doesn't need to be chased later.
Your legal rights to deletion
In California, the CCPA gives residents the right to ask a business to delete the personal information it collected from them. Businesses must respond within 45 calendar days, which they can extend once to 90 days by telling you. There are exceptions — for example, information a business needs to complete a transaction, for security, or to meet legal obligations. People in the European Union have a similar "right to erasure" under the GDPR, and more U.S. states are adding their own laws.
For data brokers — companies that may hold your information without ever having been your customer — Californians can now use the state's DROP platform to send one deletion request to every registered broker at once. See our guide to data brokers.
Questions to ask any service before you trust it
- When I delete a file, is it gone from live systems immediately?
- How long until it's out of backups?
- Was my data ever shared with anyone who keeps their own copy?
- Was it used to train AI or build a profile?
- Can I export everything first?
How deletion works at Unfoggable
Delete a document and it's removed from live systems right away. Close your account in Settings and your vault is removed from live systems immediately, and from backups within 30 days. Because we never sell your data, share it for marketing or train AI on it, there are no outside copies or learned profiles to chase. And you can export your whole vault before you go.
Delete should mean delete. Ask every service you use what it means to them.