# Data & privacy

The account **Data & privacy** page lets you use your rights over your personal data. You can download your data, correct it, change your cookie choices or delete your account.

## Before you start [#before-you-start]

- To open the page, click your avatar at the top right, click **User settings**, and then click **Data & privacy** in the **Privacy** group of the sidebar.
- The page is about your own personal data, not about the monitoring data of a workspace.
- For what VitalSentinel collects and how long it keeps it, see [Data privacy](/help/data-privacy).

## Your rights [#your-rights]

The **Your rights** card shows one tile for each right under the GDPR (the data protection law of the European Union). You can use each right at no cost.

| Right | What it does |
|-------|--------------|
| **Access** | Get a copy of the data VitalSentinel holds about you. |
| **Rectification** | Correct data that is wrong or not complete. |
| **Erasure** | Delete your account and your data. A few records stay, as the Privacy Policy explains. |
| **Portability** | Get your data in a machine-readable file. |
| **Objection** | Object to processing that VitalSentinel does for its own legitimate interests. |
| **Withdraw consent** | Withdraw a consent you gave, for example **Counting opens and clicks** in emails. What VitalSentinel did before stays lawful. |

You can use each right once every 14 days. **Objection** and **Withdraw consent** have no limit. If you used a right recently, the tile shows the date when you can ask again.

## How a request works [#how-a-request-works]

The **How a request works** card explains the three steps:

1. **Pick a right**: click a tile and check what will happen. VitalSentinel sends a 6-digit code to the email address of your account.
2. **Enter the code**: the code shows that it is you. After you enter it, VitalSentinel does the rest. No person has to read your request.
3. **How long it takes**: VitalSentinel applies a correction, an objection and a withdrawal immediately.

For an erasure, VitalSentinel deactivates your account immediately and deletes your data after 30 days.

For access and portability, VitalSentinel puts your data in a ZIP file, with one JSON file for each kind of data. This takes up to 24 hours. VitalSentinel sends the download link to your email. The file has no passwords or other secrets, and no data of other people.

If something does not work, write to VitalSentinel from the email address of your account. VitalSentinel answers within 30 days.

## Your requests [#your-requests]

The **Your requests** card lists each request and its state. If you made no request, the card shows **No requests yet**.

| State | Meaning |
|-------|---------|
| **Waiting for code** | Enter the 6-digit code from the email. |
| **Confirmed** | VitalSentinel received the code. |
| **In progress** | VitalSentinel is working on the request. |
| **Done** | The request is complete. For access and portability, click **Download**. |
| **Failed** | The request did not complete. Write to VitalSentinel. |
| **Canceled** | The request was canceled. |

## Cookie choices [#cookie-choices]

The **Cookie choices** card lets you change or withdraw the cookie choice you made on the VitalSentinel site. Click **Manage cookie consent**. The change applies immediately. It does not affect what VitalSentinel processed before you withdrew.

## Delete your account [#delete-your-account]

The **Danger zone** card deletes your account. The card says "Permanently removes every workspace you own and its data. We email a confirmation link first."

<Callout type="warn">
  Deleting your account is permanent. VitalSentinel erases every workspace you own with all its domains and data, its members and invitations, its Google accounts, API keys, Slack channels and webhooks. Apps that you connected lose access. VitalSentinel also deletes your support tickets, your profile and your notification settings.
</Callout>

You are also removed from every workspace where you are only a member. Those workspaces stay, and so does their data.

### Steps to delete your account [#steps-to-delete-your-account]

1. Click **Delete account**.
2. Read the list of data that VitalSentinel erases.
3. Type `DELETE` in capital letters.
4. Click **Delete account**.
5. Open the confirmation email and click the link. The link expires in 24 hours.
6. On the **Delete your account** page, enter **Your password**.
7. Click **Delete my account permanently**. To stop, click **Cancel and go back**.

After step 4, the page shows **Check your email**. Nothing is deleted until you click the link and confirm. When the deletion is complete, the page shows **Account deleted**.

### Paid time that is left [#paid-time-that-is-left]

If a workspace you own or your consultation plan is canceled but still paid, the page shows **You lose the paid time that is left**. It names each plan and the date until which it is paid. Then it says "Deleting your account ends this paid time now." A canceled plan does not block the deletion.

## When account deletion is blocked [#when-account-deletion-is-blocked]

If you own a workspace with a paid subscription that is still running, you cannot delete your account. A running consultation plan also blocks the deletion. The **Danger zone** card shows "You have a paid subscription that is still running:" and the names. Then it says "Cancel it before you delete your account." The **Delete account** button is not available. While the page checks your workspaces, the card shows "Checking your workspaces…".

1. Click **Open billing** (or **Open consultations** for a consultation plan).
2. Cancel the subscription. See [Billing](/workspace/billing) or [Consultations](/help/consultations).
3. Come back to **Data & privacy**. When the subscription shows as canceled, the **Delete account** button is available again.

After you cancel, the paid time that is left ends when you delete your account. See [Paid time that is left](#paid-time-that-is-left).

If the card shows "We couldn't check your workspaces, so deleting your account is paused.", click **Try again**.

## Troubleshooting [#troubleshooting]

### Why can I not delete my account? [#why-can-i-not-delete-my-account]

You own a workspace with a paid subscription that is still running, or you have a running consultation plan. The **Danger zone** card names it. Click **Open billing** or **Open consultations** and cancel the subscription. Then come back and delete your account.

### Why does the deletion link say Link expired? [#why-does-the-deletion-link-say-link-expired]

The page shows **Link expired** when the link is not valid or is older than 24 hours. Click **Back to settings**, open **Data & privacy** and click **Delete account** again to get a new link.

### How long does a data download take? [#how-long-does-a-data-download-take]

An **Access** or **Portability** request takes up to 24 hours. VitalSentinel sends the download link to your email. The **Your requests** card then shows **Done** and a **Download** button.

### Why can I not use a right again? [#why-can-i-not-use-a-right-again]

You can use **Access**, **Rectification**, **Erasure** and **Portability** once every 14 days. The tile shows the date when you can ask again. If you ask again before this date, VitalSentinel refuses the request and sends it to its privacy team as a ticket. The privacy team replies to you. For an urgent request, write to VitalSentinel. The refusal ends with "You can also complain to a data protection authority."

## Related [#related]

- [Data privacy](/help/data-privacy) - what VitalSentinel collects and how long it keeps it
- [Billing](/workspace/billing) - cancel a subscription that blocks deletion
- [Security](/account/security) - your password and two-factor sign-in
- [Theo and your privacy](/theo/privacy) - what Theo sends and keeps