opinvera legal terms

Data Deletion Request

Effective August 7, 2026 · Version 1.0

This page explains how to ask us to delete your OpinVera account and the personal data associated with it.

You do not need the app, and you do not need to be signed in, to make this request. If you have uninstalled OpinVera, lost access to your device, or cannot sign in, you can still use the email route in Section 2 below. This page is the public deletion route required by the Google Play Data safety policy, and it stands alongside the in-app route in Section 1.

1. Deleting from inside the app

If you can sign in, the fastest route is in the app: Settings → Delete or deactivate → Delete your account. You will be asked to confirm, and we will show you what the deletion covers before you commit to it.

2. Requesting deletion without the app

Send an email to support@opinvera.com with the subject line "Data deletion request".

So that we can find your account and be confident the request is yours, please include:

• The email address or phone number registered to the account
• Your OpinVera username, if you remember it
• Whether you want the whole account deleted, or only specific data (say which)

We may need to verify your identity before acting on the request. We ask only for what is needed to match you to the account; we do not require an identity document to delete an account, and we will never ask for your password.

3. What gets deleted

On completion of a full account deletion we delete, or irreversibly anonymize:

• Your profile: name, username, biography, profile and background images
• Your contact details: email address, phone number, postal location data
• Your account credentials and session data
• Your trust-circle connections and invitations
• Your interests, followed media sources, and notification preferences
• Your identity verification status and its metadata

Identity verification imagery is held by our identity verification provider, not by OpinVera, and is redacted after verification completes — see Privacy Policy §7.

4. What we keep, and why

Deletion is not always total, and the law does not always permit it to be. We retain the following after an account is deleted:

• Votes you have already cast. Votes are irreversibly detached from your account rather than withdrawn — see Section 4.2 for what that means and what it leaves behind.
• Moderation and enforcement records where an account was actioned, retained to enforce the Prohibited Content Policy and to stop a banned account simply returning. We keep these for one year, unless the law requires us to keep them for longer — see Section 4.1.
• Transaction records for any verification fee paid, retained as long as tax, accounting, and audit law requires.
• Records needed to establish, exercise, or defend legal claims, and anything we are under a legal obligation or preservation order to keep.
• Aggregated and anonymized data that can no longer identify you. This is not personal data and is not subject to deletion.

Server logs are retained for 30 days and expire on their own cycle (Privacy Policy §7).

4.1 When a moderation record is kept longer than a year

One year is our own retention period, and it is the one that applies in the ordinary case. It is extended only where a specific legal obligation requires it, only for the data that obligation covers, and only for as long as it lasts:

• Child-safety reports. Where we have submitted a report to the U.S. National Center for Missing & Exploited Children, U.S. law treats that submission as a request to preserve its contents for one year from submission (18 U.S.C. §2258A, as amended by the REPORT Act, 2024).
• Terrorist content removal orders. Where content has been removed under an EU removal order, we must preserve that content and its related data for six months, and for longer where a competent authority or court requires it for ongoing administrative or judicial review (Regulation (EU) 2021/784, Article 6).
• Decisions still open to challenge. Under the EU Digital Services Act you may complain about a moderation decision for at least six months from the day we notify you of it (Regulation (EU) 2022/2065, Article 20). We keep the record for at least that window, because a complaint we cannot examine is not a complaint we can answer.
• Legal holds. Where a preservation order, litigation hold, or other lawful request obliges us to retain a record, for as long as it so obliges us.

Where one of these applies, we retain the record for the longer of one year and the period the obligation requires. When it lapses, the record returns to the ordinary rule and is deleted.

4.2 What "irreversibly detached" means for your votes

A vote you have cast is not withdrawn from the poll it was cast in. It keeps counting, and the link between that vote and you is destroyed.

Why the vote stays. A published result that quietly changed whenever someone closed an account would not be a trustworthy record. Results also become final only once enough people have voted; pulling votes back out could reopen results that had already settled, and would change the standing of everyone else who voted on the same item. We are not willing to make one person's account closure alter other people's records.

What is left behind. The detached record keeps only the rating itself, what it was about, the weight it carried at the moment of detachment, and the period in which it was cast. It does not keep your identifier, and it does not keep the precise time you voted — we deliberately coarsen that, because on a small poll an exact timestamp can single a person out, and a record that can single you out has not really been detached.

It cannot be undone, by anyone. The detachment is cryptographic, not a flag in a database: the key that links your votes to you is destroyed, and no copy of it is kept — not by us, not by a third party, not in a vault, not in escrow. Backups follow the ordinary cycle described in Section 5: any copy already written to a backup goes when that backup expires, within 35 days, and cannot be used to reverse the detachment in the meantime. This is the strongest form of the promise we can make, and it is why we can say the residue is no longer personal data. The consequence is that you cannot afterwards ask us to find, change, or remove any individual vote, and we could not do it if we wanted to — we can no longer tell which one was yours. We keep an auditable record that the destruction happened and when, containing no information about you.

When it happens. Detachment completes at the end of the deletion process described in Section 5, not the moment you ask. Until it completes, your account is closed and inaccessible, and we retain the ability to complete the checks below.

Votes that are excluded rather than detached. Where a vote was already excluded from a result — because it failed our integrity checks, or because the account was actioned for breaking the rules — it stays excluded. It is not quietly folded into the tally by being anonymized. Closing an account is not a way to make a vote that would not have counted start counting, or to put a disputed vote beyond examination.

5. How long it takes

We acknowledge deletion requests promptly and complete them within 30 days of verifying the request. For requests under the California Consumer Privacy Act the period is 45 days, extendable once where the law allows, and we will tell you if we need the extension.

Backups are rotated on a fixed cycle. Data already written to a backup is removed as that backup expires rather than being extracted from it, and remains inaccessible for ordinary use in the meantime — a restored backup is re-reconciled against completed deletions before it is returned to service, so a restore cannot resurrect a deleted account. No backup containing your data is retained more than 35 days after your deletion completes.

6. Deletion is permanent

A deleted account cannot be restored. Your username is released and may be taken by someone else. If you later want to use OpinVera again, you will need to create a new account and, if you want a verified badge, verify your identity again — the verification fee is not carried over and is not refunded on deletion.

7. If something goes wrong

If we refuse a request, we will tell you why and what you can do about it. You may reply to the same address to ask us to reconsider.

Users in the EEA and UK may also lodge a complaint with a supervisory authority; users everywhere retain the rights described in Privacy Policy §8. Nothing on this page limits those rights.

8. Contact

Email: support@opinvera.com Mail: ECOMO.WORLD LLC, ATTN: Data Deletion, 1978 Watson Circle, Rochester, Michigan 48306