Account Deletion
You have the right to delete your SAR Portal account at any time. This guide explains the process and what happens to your data.
Types of Deletion
Individual User Deletion
If you’re a user (not the only admin):
- Your account is removed from Entra ID and from SAR Portal
- The organization’s cases and data are preserved
- Organization continues operating
- Other users unaffected
Organization Deletion
If you’re the last admin:
- Entire organization is deleted
- All users removed
- All data deleted
- Subscription cancelled
Deleting Your User Account
Requirements
- You must not be the only admin
- Add another admin first if needed
Process
- Go to Account Settings
- Click Delete Account
- Read the warnings
- Confirm your understanding (checkboxes)
- Click Delete My Account
What Happens
- You receive confirmation email
- Your account is immediately deactivated
- Your login credentials are removed
- Audit entries show “Deleted User”
- Your cases remain (for compliance)
Deleting Your Organization
Warning
This action is irreversible and deletes:
- All cases and documents
- All user accounts
- All settings and configurations
- All stored data
Requirements
- You must be an admin
- You must be the only remaining admin
- All other users must be removed first
Process
- Remove all other users
- Go to Account Settings
- Click Delete Organization
- Read the warnings carefully
- Check both confirmation boxes:
- “I understand all data will be deleted”
- “I understand this cannot be undone”
- Click Delete Everything
What Happens
Organization deletion runs immediately and synchronously - there is no deferred purge window. As soon as you confirm:
- Stripe subscription cancelled (no more charges)
- All cases permanently deleted (not anonymized)
- All documents and redacted versions permanently deleted
- All blobs removed from storage
- All user accounts removed
- The organization record removed
Retained afterwards (7 years):
- Anonymized audit logs only
- Required for legal compliance (GDPR Article 17(3)(e))
- No personal data included
Before Deleting
Consider
- Export any data you need
- Download important documents
- Save audit logs for your records
- Inform your team
Data Export
Before deletion:
- Export your case data (per-case or full-tenant, as JSON or PDF)
- Download needed documents
- Export audit logs (CSV or PDF)
Data export is always available - even while restricted - under GDPR Article 20.
Subscription
When organization is deleted:
- Subscription auto-cancels
- No further charges
- No refund for unused time
- Final invoice if applicable
What Happens to Your Data
Personal Information
User Data:
- Email, name: Deleted
- Login credentials: Removed
- Profile data: Removed
Organization Data:
- Company info: Deleted
- Settings: Deleted
- Branding: Deleted
Case Data
On full organization deletion, cases are deleted outright - not anonymized:
Cases:
- Entire case records: Permanently deleted
- Subject names, emails, phone numbers, notes: Deleted with the case
Documents:
- Original files: Permanently deleted
- Redacted versions: Permanently deleted
- File metadata: Removed
(Email hashing applies to the separate case-anonymization feature used when you close a case but keep your account - not to full organization deletion.)
Audit Logs
Retained (7 years):
- Anonymized action records
- No personal data
- For legal defense purposes
Basis: GDPR Article 17(3)(e) - establishment, exercise or defence of legal claims
Deletion vs Cancellation
Deleting your organization is not the same as canceling your subscription:
| Cancel subscription | Delete organization | |
|---|---|---|
| Billing | Stops | Stops (Stripe auto-cancelled) |
| Your data | Kept (read-only + export) for 90 days, then access blocked | Deleted immediately and permanently |
| Reversible | Resubscribe within 90 days to resume | No - cannot be recovered |
If you simply want to stop paying but might return, cancel instead of deleting. See Plans & Pricing for cancellation details.
When You Delete an Organization with an Active Subscription
- The Stripe subscription is cancelled immediately as part of deletion
- No further charges
- No refund for unused time
Trial Accounts
- Can delete anytime
- No charges involved (no card on file)
- Data deleted per the normal process above
Recovering Deleted Accounts
User Accounts
Cannot be recovered. Create new invitation if needed.
Organizations
Cannot be recovered. Would need to:
- Register as new organization
- Start fresh
- Re-upload any needed data
GDPR Rights
This deletion process satisfies:
- Article 17 - Right to erasure
- Your right to have data deleted
- With documented retention per Article 17(3)(e)
Getting Help
If you have questions about deletion:
- Email: support@sarportal.com
- Review this documentation
- Consider data export first
Alternatives to Deletion
Before deleting, consider:
Downgrade Plan
- Move to the Basic plan (€29/mo) to cut costs while keeping access and data
- The minimum paid plan is Basic - there is no free tier
Cancel Instead of Delete
- Stops billing but keeps your data read-only for 90 days
- Export everything you need during that window
- Resubscribe within 90 days to resume
Deactivate Users
- Remove other users
- Keep one admin
- Reduce costs
Export and Archive
- Export important data (per-case or full-tenant, as JSON or PDF)
- Then delete if needed
- Maintain records externally