Delete your account & data
This page explains how to request deletion of your PharmaScript account and the personal data we hold about you, what we delete, and what we are legally required to retain.
Request deletion in one email
Send a message to [email protected] from the email address on your account, with the subject:
Delete my account
Open email draftWhat we delete
When you request account deletion, we permanently remove the following from our systems within 30 days:
| Data | Status | When |
|---|---|---|
| Your account record (name, email, sign-in credentials) | Deleted | Within 30 days |
| Your subscription preferences and email opt-ins | Deleted | Within 30 days |
| Manifest images you uploaded | Deleted | Within 30 days (already deleted from active storage every 30 days regardless) |
| Driver profile (license number, vehicle ID, device ID) | Deleted | Within 30 days |
| Referral code and pending referral credit | Deleted | Within 30 days |
| Mileage log and earnings history | Deleted | Within 30 days |
| Diagnostic logs and error reports | Deleted | Within 90 days (rolling retention) |
What we are legally required to retain
Some records cannot be deleted on request because federal or state law requires us to keep them. These are retained only as long as the law requires, then deleted automatically:
| Data | Why retained | How long |
|---|---|---|
| Delivery audit log (timestamps, GPS, signature images, photo proof, controlled-substance verification) | HIPAA & DEA recordkeeping for the pharmacies you delivered for | 6 years from the delivery date |
| Subscription billing records (invoices, payment metadata via Stripe) | US tax and accounting law (IRC §6001) | 7 years from the transaction date |
| Communications you sent us via support@ | Retained for dispute resolution | 2 years from the date sent |
How to verify deletion is complete
After your deletion is processed, you will receive a confirmation email at the address on your account. The confirmation includes:
- The date your account record was deleted
- Which categories of data were deleted vs. retained
- For retained data: the legal basis and the date it will be deleted automatically
Deleting just your data, not your account
If you want to keep your account but delete specific data — for example, the manifest images from a particular pharmacy you no longer deliver for — email us with the subject "Partial data deletion" and describe what you want removed. We will respond within 7 business days.
Third-party sub-processors
When you request deletion, we also send deletion requests to the sub-processors that hold copies of your data on our behalf:
- Clerk — authentication records
- Stripe — payment method (subject to Stripe's own 7-year tax retention)
- Resend — your email address (so we don't accidentally re-email you)
- Cloudflare — access logs (auto-deleted after 30 days regardless)
- Sentry — error reports (PII is scrubbed at write time anyway)
If we can't delete your account immediately
There are two situations in which we may temporarily delay processing your deletion:
- You have an active subscription. Cancel the subscription first (from your account settings or the Stripe Customer Portal). Once it's canceled, we can delete the account record.
- You are currently the subject of an audit or dispute. We retain the minimum data necessary to resolve it, then delete on schedule.
If either applies, our reply email will tell you exactly which condition is blocking deletion and when we expect to complete it.
Questions
Email [email protected]. We read every reply.