Legal

Data Deletion Request

How to have your account and personal data deleted, including anything received through Facebook Login.

HIPAA-compliant·BAA available·PHI never used for model training

How to request deletion

Request deletion of my data →

That opens our contact form with the request type already selected. Give the email address you use to sign in — that address is how your account is identified, and we use it to confirm the request is yours before anything is deleted.

If you would rather write to us directly, email support@ondemandpsych.com from your account address and tell us you want your data deleted.

You do not need to give a reason, and you do not need an active subscription to ask.

If you signed in with Facebook

Facebook Login gives us three things about you: your name, your email address, and a link to your profile picture. We use the email address to find or create your account.

We do not store your Facebook user ID, your friends, your posts, or anything else from your Facebook profile, and we never post to Facebook on your behalf.

Because your account is identified by email rather than by a Facebook ID, removing this app from your Facebook settings does not by itself delete your OnDemand Psychiatry account. To have that data deleted, send the email described above. You can also simply stop using Facebook to sign in: set a password from the sign-in page and use that instead, and the connection is no longer used.

What we delete

When we action your request we permanently remove:

  • Your account and profile: name, email address, profile picture, and password.
  • Your entire clinical co-pilot history — every conversation, every message, every document you uploaded, and any transcript produced from audio you dictated.
  • Your saved folders, preferences, and notification settings.
  • Your name, and any notes held about you by our support team.

Deletion is permanent and cannot be undone. Your conversations are not recoverable afterwards, so export anything you want to keep first.

What we have to keep, and why

A small amount of information outlives the account, because the law requires it. We keep the minimum, and it is never used to contact you or to build a profile:

  • Payment and invoice records. Financial regulations require retention of transaction records. These are held by our payment processor and in our billing records, and they identify a transaction rather than anything clinical.
  • Security and audit logs. Records that a sign-in or an administrative action occurred, kept so that suspected unauthorised access can be investigated. These are retained for a limited period and then removed.
  • Email delivery logs. A record of messages we sent you — receipts, password resets and similar — is kept for a limited period so that a delivery failure or a disputed notice can be traced. These are unlinked from your account when it is deleted. Tell us if you would like them purged sooner and we will do it.

Where a record must be kept for one of the reasons above, the account it belongs to is anonymised rather than left intact: the identifying details are erased and what remains is a transaction or a log line that no longer names you.

Nothing in these records includes the content of your clinical conversations.

How long it takes

We acknowledge every request within 7 days and complete deletion within 30 days, which is the standard period under GDPR and comparable regimes. If anything delays it, we will tell you why and when it will be done.

You will receive written confirmation once the deletion is complete.

Deleting only some of your data

You do not have to choose all or nothing. Use the same form if you would rather delete individual conversations, remove an uploaded document, get a copy of what we hold about you, or correct something that is wrong. Individual conversations can also be deleted by you at any time from within the co-pilot.