Data Deletion.

Effective date: 2026-10-27.

This Data Deletion Policy and Instructions (this "Policy") explains how you can ask wrxstack ("wrxstack", "we", "us") to delete your account and your personal data, how we carry out that request, and the limited cases in which we keep information after a request. It applies to the wrxstack products, including Atlas at atlas.wrxstack.com and Folio, the portfolio and personal-site builder, at portfolio.wrxstack.com, and to the website at wrxstack.com (together, the "Service").

This Policy is also our published data deletion instructions for every third-party sign-in provider the Service supports, including Facebook Login (Meta), Sign in with Microsoft, Sign in with Google, and Sign in with Apple. It supplements our Privacy Policy. If the two documents differ on a deletion matter, this Policy controls for that matter.

The short version

You can have your data deleted in any of the three ways below. Each one is free. You do not need to give a reason.

1. Scope and roles

This Policy covers personal data that wrxstack holds about you in connection with the Service, including:

• your account record, such as your name, email address, password hash, and preferences;
• profile data shared with us by a sign-in provider you chose to use, as described in section 6;
• content you create or upload in the Service, such as portfolios, pages, documents, files, and records;
• technical and usage data connected to your account, such as sessions and activity records;
• messages you send us, including contact-form submissions and newsletter sign-ups.

Our role. For accounts you open yourself, wrxstack decides how your personal data is used and is responsible for deleting it under this Policy. Where you use the Service through an account that your employer or another organization (the "Customer") controls, that Customer decides what happens to the data in its workspace, and we act on its instructions under our Data Processing Addendum. Section 14 explains how that changes the steps.

Who operates wrxstack. wrxstack is an independent, privately owned product run by a small team. All deletion requests are handled through contact@wrxstack.com.

2. Your right to deletion

Every person who uses the Service may ask us to delete the personal data we hold about them, wherever that person lives, and we aim to consider each request on the same basis, subject to section 20. Depending on your location, the law may also give you a legal right to erasure, including under Article 17 of the EU and UK General Data Protection Regulation, the California Consumer Privacy Act as amended by the California Privacy Rights Act, the Swiss Federal Act on Data Protection, and similar laws elsewhere. Where a law gives you stronger rights than this Policy describes, we follow that law.

We will not deny you the Service, charge you differently, or treat you less favorably because you asked us to delete data. Some data is needed to run an account, so deleting it will close that account. That is a direct result of the deletion and is not a penalty.

3. Before you delete

• Deletion is permanent. Once your account is deleted from the live Service, we cannot restore it, and we cannot recover its content for you later.
• Export first if you want a copy. Use the export options in the product where they are offered, or email contact@wrxstack.com and ask for an export before you delete. We send any export only to the email address on the account.
• Published pages stop. Public portfolio pages and any custom domain connected to them stop serving content when the account is deleted. If you use a custom domain, update its DNS records with your domain registrar afterwards. We do not control your registrar.
• Paid subscriptions. Deleting an account ends access to that account, including any paid features on it. Cancel any active subscription in the product before you delete, so that no further billing is attempted. Billing matters are governed by the Terms of Service.
• Shared workspaces. If other people use a workspace you own, deleting your account can delete that workspace for them too. See section 15.

4. Way 1: Delete your account in the product

4.1 Folio (portfolio.wrxstack.com)

1. Sign in at portfolio.wrxstack.com with the same method you used to create the account, for example Facebook, Microsoft, Google, or email and password.
2. Open Account settings.
3. Go to the account deletion section and choose to delete your account.
4. Type the email address on the account exactly as shown, to confirm. If your account has a password, enter your current password as well.
5. Confirm. Your account and the data you own are deleted from the live Service straight away, subject to section 11, you are signed out, and you are returned to the sign-in page with a message confirming the deletion.

If the deletion cannot be completed, for example because your session has expired or a password does not match, nothing is deleted and the page tells you what to fix. Sign in again and retry, or use Way 2.

4.2 Atlas (atlas.wrxstack.com)

Sign in at atlas.wrxstack.com and open your account settings. Where a delete account option is shown to you, follow the on-screen steps to confirm. If the option is not shown, for example because your account is managed by an organization or the option is not yet available for your account type, use Way 2 and we will handle the deletion request for you. If your Atlas account belongs to an organization's workspace, read section 14 first.

4.3 If you cannot sign in

If you no longer have access to the sign-in provider or email address you used, for example because you closed your Facebook or Microsoft account, you can still have your data deleted. Use Way 2 and we may verify your request in another way, as described in section 13.

5. Way 2: Request deletion by email

Send an email to contact@wrxstack.com with the subject line Data deletion request. Send it from the email address on your wrxstack account if you can, because that is the fastest way for us to confirm the request is yours. Please include:

• the product or products concerned (Atlas, Folio, the website, or all of them);
• the email address on the account, and the sign-in method you use, for example Facebook, Microsoft, Google, Apple, or email and password;
• whether you want the whole account deleted, or only specific data (see section 18);
• whether you want an export of your data sent to you before deletion.

If you prefer, you may send a request by any other reasonable means of contacting us. We aim to handle it in the same way, provided it is clear and we can verify it.

6. Data we receive from sign-in providers

The Service may let you create an account or sign in using an account you hold with a third party. The providers currently supported by one or more wrxstack products are Facebook (Meta), Microsoft, Google, Apple, LinkedIn, GitHub, GitLab, X, and Discord. Organizations may also connect their own single sign-on through SAML or OpenID Connect. The sign-in page of each product shows which options are available there.

6.1 What we receive

When you choose a sign-in provider, that provider shares with us, with your permission, the basic profile information needed to create and secure your account. This is limited to:

• your name;
• your email address, and whether the provider has verified it;
• your profile picture, where the provider supplies one;
• a unique account identifier issued by the provider for use with wrxstack;
• the sign-in tokens the provider issues to complete and maintain the sign-in.

6.2 What we do not receive or do

• We do not receive or store your password for the provider.
• We do not request access to your friends list, contacts, posts, photos, messages, or mailbox through sign-in.
• We do not post, send messages, or take any action on the provider on your behalf.
• We do not sell provider data, use it for advertising, or share it with any other party except the service providers that host the Service.

6.3 How deletion applies to provider data

When your account is deleted under Way 1 or Way 2, we delete the profile information and identifiers listed in section 6.1, together with the link between your wrxstack account and your provider account and any tokens we hold for that provider. After deletion we can no longer associate your provider account with any wrxstack data. If you later sign in with the same provider again, a new, empty account is created.

Deleting your wrxstack account does not delete or change your account with the provider. The provider holds its own records of the apps you have connected, under its own privacy policy. To remove wrxstack from that list, follow section 9.

7. Facebook Login data deletion instructions

If you signed in to a wrxstack product with Facebook, you can remove our access and ask us to delete your data as follows. These are our data deletion instructions for the purposes of the Meta Platform Terms and Developer Policies.

7.1 Ask us to delete your data

Use either of these methods:

• In the product. Sign in to the wrxstack product with Facebook and delete your account from account settings, as described in section 4.
• By email. Email contact@wrxstack.com with the subject "Data deletion request", stating that you signed in with Facebook and giving the email address on your Facebook account.

7.2 Remove wrxstack from your Facebook account

1. Open Facebook and go to Settings and privacy, then Settings.
2. Open Apps and websites. You can also go directly to facebook.com/settings?tab=applications.
3. Find wrxstack in the list of active apps and websites and select Remove.
4. Removing the app stops Facebook from sharing further data with us. To delete the data we already hold, complete section 7.1 as well.

When the deletion is complete we aim to send a confirmation by email, as described in section 12. If you receive one, keep it as your record of the deletion.

8. Sign in with Microsoft data deletion instructions

If you signed in to a wrxstack product with a Microsoft account, the steps depend on the type of account you used.

8.1 Ask us to delete your data

Delete your account in the product as described in section 4, or email contact@wrxstack.com with the subject "Data deletion request", stating that you signed in with Microsoft and giving the email address of that Microsoft account.

8.2 Personal Microsoft account (Outlook.com, Hotmail, Live, Xbox)

1. Sign in at account.live.com/consent/Manage.
2. Find wrxstack in the list of apps that have access to your account.
3. Select Edit, then Remove these permissions.

8.3 Work or school account (Microsoft Entra ID)

1. Sign in at myapps.microsoft.com with your work or school account.
2. Find wrxstack, open its menu, choose Manage your application, then Revoke permissions.
3. If the option is not available to you, your organization's administrator controls it. Your administrator can remove the wrxstack application from your organization's Microsoft Entra admin center.

If your Microsoft work or school account is linked to an organization's wrxstack workspace, your organization may also control the data in that workspace. See section 14.

9. Way 3: Disconnect wrxstack at each provider

The table below shows where each provider lets you remove an app's access. Providers change their menus from time to time. If a path below no longer matches what you see, search the provider's help pages for "connected apps" or "third-party apps", or ask us and we will try to help.

Disconnecting at a provider prevents future sign-ins with that provider. If it was the only way you signed in, you will not be able to reach the account afterwards, so complete Way 1 or Way 2 first if you also want the data deleted.

10. What we delete

When your account is deleted, we delete the following from the live Service:

Where a deletion step fails for a technical reason, for example a storage service that is temporarily unavailable, the Service is designed to record the failure and retry the step. A temporary failure does not cancel your request.

11. What we keep, and why

We keep information after a deletion request only where one of the reasons below applies, only for as long as that reason lasts, and only to the extent needed for it. We use retained information only for the reason it was kept.

• Backups. Our hosting provider keeps encrypted backups for disaster recovery. Backups are not edited record by record. Deleted data remains in them until the provider's ordinary backup rotation overwrites it, and is then gone. We do not use backups to restore an individual account. If we have to restore the Service from a backup, we take reasonable steps to re-apply the deletions completed since that backup was taken.
• Legal and tax obligations. Where we have billed you, we keep the invoices and transaction records that tax and accounting law requires, for the period that law requires. Payment card details are held by the payment processor, not by us.
• Security and abuse prevention. We may keep limited records, such as an email address or account identifier linked to a confirmed violation of our Acceptable Use Policy, to prevent fraud, abuse, or the return of a banned user.
• Activity records in shared workspaces. Entries in a workspace's audit log that describe your past actions are kept for the workspace owner, but your identity is removed from them, so they no longer point to you.
• Content that belongs to someone else. Content you contributed to a workspace owned by another person or organization belongs to that workspace. It stays there and is attributed to the workspace owner. To ask for it to be removed, contact the workspace owner, or contact us and we may pass your request to them.
• Legal claims and lawful requests. We keep information that is needed to establish, exercise, or defend a legal claim, or that is subject to a valid legal hold or court order, until the matter is resolved.
• A record of your request. We keep a minimal record of each deletion request, limited to the date, the email address it came from, the scope of the request, and the date it was completed, so we can show that we honored it. We do not keep the deleted content in that record.
• De-identified information. Aggregated or de-identified statistics that cannot reasonably be linked back to you, such as total counts of accounts, are not personal data and are not affected by deletion.

Where we keep information for one of the reasons above, we aim to tell you which categories we kept, and we do so where the law requires it.

12. Timelines and confirmation

Where a law that applies to you sets a different deadline, we follow that law. You may ask about the status of your request at any time by replying to our acknowledgement or by emailing contact@wrxstack.com.

13. Verifying your identity

Deletion cannot be undone, so before we delete anything at an email request we confirm that the request comes from the account holder. We use the least information we need to do that.

• If you email us from the address on the account, we normally treat that as sufficient, and we may send a confirmation link or question to that address.
• If you email from a different address, or no longer have access to the account's address or sign-in provider, we may ask you to answer questions about the account that only the holder would know, or to confirm control of the account in another reasonable way.
• We do not ask for your password, a one-time code, or a payment card number.
• Information you give us only for verification is used for that purpose alone, and we aim to delete it once the request is resolved.
• If we cannot verify a request, we aim to tell you why and what would allow us to proceed. We do not delete an account on an unverified request.

14. Accounts managed by an organization

If you use Atlas or another product through a workspace that your employer or another organization controls, including through its single sign-on, that organization is the Customer and the controller of the content in its workspace.

• Workspace content. Requests to delete content in an organization's workspace should go to that organization's administrator, who can delete it directly. If you send the request to us, we may forward it to the organization and assist it in responding, to the extent our Data Processing Addendum provides.
• Your own account data. Data we hold about you for our own purposes, such as messages you sent us or marketing preferences, is ours to delete, and we handle that part of your request directly.
• Leaving an organization. When an administrator removes you from a workspace, your access ends. What happens to content you created there is decided by the organization.

15. Deleting a workspace

The owner of a workspace can delete it, or ask us to delete it. Deleting a workspace deletes all of its content for every member, not only for the owner, and published pages from that workspace stop serving. Before you delete a workspace that other people use, tell them and give them the chance to export what they need. If you are the sole owner of a workspace when you delete your account, that workspace is deleted with your account.

16. Requests made on someone else's behalf

• Authorized agents. Where the law allows it, you may use an authorized agent to make a request for you. We may ask the agent for written permission signed by you, and we may ask you to confirm your identity with us directly.
• Parents and guardians. A parent or legal guardian may ask us to delete the data of a child in their care. See section 22.
• Deceased users. A family member, executor, or other legal representative of a person who has died may ask us to delete that person's account. We may ask for reasonable evidence of the death and of the requester's authority. We do not give a requester access to the account or its content as part of a deletion.

17. Website visitors without an account

• Contact-form messages. Messages sent through our contact forms reach us by email through our form-delivery provider. Ask us and we will delete the messages and your contact details from our mailbox, subject to section 11.
• Newsletter. Use the unsubscribe link in any newsletter email, or email us. We remove your address from the list and delete it, apart from a suppression record of the address where needed to make sure we do not email you again.
• Analytics. Analytics on the website load only with your consent and are linked to a random identifier in your browser, not to your name or email address. You can withdraw consent at any time in the cookie settings described in our Cookie Policy, and clearing your browser's cookies and site data removes the identifier from your device. Because analytics data is not tied to your identity, we generally cannot find it from an email address. If you give us the identifier, and the analytics provider's tools allow it, we will ask that provider to delete the associated data.

18. Partial deletion and other choices

You do not have to delete your whole account to control your data. You can also:

• edit or delete individual items of content in the product at any time;
• disconnect a single sign-in method in account settings, where the product offers it, while keeping another way to sign in;
• withdraw consent to analytics, or unsubscribe from marketing email, without affecting your account;
• ask us by email to delete a specific category of data, such as your profile picture or a past message to us. If deleting that data would stop the account from working, we aim to tell you before we act.

19. Third parties and service providers

We use a small number of service providers to run the Service, listed on our sub-processor list. When we delete your data, the copy held by a provider for us is deleted through the same process where the provider supports it, or otherwise in line with that provider's data-handling terms. We do not sell your personal data to anyone, so there are no buyers to notify.

Sign-in providers such as Meta, Microsoft, Google, and Apple are independent companies. They hold their own data about you, including the fact that you connected wrxstack, under their own privacy policies. We cannot delete data held by them. Use section 9 or contact the provider to manage it.

20. When we may decline or limit a request

We may decline or limit a deletion request where the law allows, including where:

• we cannot verify that the request comes from the account holder or a person authorized to act for them;
• we are required by law to keep the information, or keeping it is needed for a legal claim, as described in section 11;
• the data is controlled by an organization, in which case we forward the request as described in section 14;
• the request is manifestly unfounded or excessive, for example a high volume of repetitive requests intended to disrupt the Service.

If we decline or limit a request, we tell you, as the law requires, the reason and how to raise a complaint.

21. No fees and no compensation

We do not charge any fee to process a deletion request, to verify it, or to provide a copy of your data before deletion. A deletion request, a deletion, or anything else described in this Policy does not create any right to a payment, credit, reimbursement, reward, or compensation of any kind, for either you or us. This Policy describes how deletion works. It does not change any other right or obligation under the Terms of Service.

22. Children

The Service is intended for people aged 16 and over. We do not knowingly collect personal data from anyone younger. If you believe that a child under 16 has given us personal data, email contact@wrxstack.com and we will take reasonable steps to delete it promptly, without requiring the child's account credentials.

23. Questions and complaints

If you are not satisfied with how we handled your request, reply to our message or email contact@wrxstack.com and we will consider it again. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work, or where you believe an infringement took place. In California, you may contact the California Privacy Protection Agency. You do not have to contact us before going to an authority.

24. Changes to this Policy

We may update this Policy to reflect changes to the Service, to the sign-in providers we support, or to the law. We will give notice where the law or the Terms require it, and the effective date at the top shows the current version.

25. Legal effect of this Policy

This Policy explains our practices. It is not a contract, and it does not create any contractual obligation, warranty, guarantee, or right for you or for any other person. The only agreements between you and wrxstack are the Terms of Service and, where it applies, the Data Processing Addendum.

Timelines and targets in this Policy are goals we aim to meet, not guarantees, except where a law that applies to us sets a deadline, in which case we follow that law. Nothing in this Policy increases wrxstack's liability. The disclaimers, the limitation of liability, and the other protections in the Terms of Service apply to everything this Policy describes. Nothing in this Policy limits a right you have under a law that cannot be limited by agreement.

26. Contact

For any deletion request or question about this Policy, email contact@wrxstack.com. Related documents: Privacy Policy, GDPR Statement, California Notice, Cookie Policy, Sub-processor List, and Data handling.