Data and account deletion

Website requests

The public website does not currently create customer accounts. To request deletion of information sent by email, write to privacy@sufet-tt.com or contact@sufet-tt.com.

SUFET Ads account

When public accounts are enabled, deletion will be available from the application and by contacting SUFET. Identity may be verified when reasonably necessary.

What is deleted

Account profile, optional content and personal data are deleted or anonymised unless retention is legally required.

Necessary retention

Invoices, proof of consent, security records and abuse-prevention signals may be retained for the applicable legal period with restricted access.

Response

SUFET will acknowledge the request and respond within the period required by applicable data-protection law.

Backups and restoration

On the SUFET Ads pilot, separate encrypted backup tasks run daily (7-day rotation), weekly (52-week rotation), and annually (each copy kept up to 5 years). Production must be configured and verified separately before public launch. A deleted item may remain in an earlier copy from this system until it expires, potentially for up to 5 years for an annual copy. Backups are not restored on user request; restoration is reserved for a major emergency, and rights requests received since the snapshot must be reapplied and verified before service resumes. For a verified legal need or documented dispute, only necessary records may be isolated with restricted access for a justified period; this does not mean a full backup is restored.

Specific Amazon Ads safeguards

Amazon rules also cover API metrics and KPIs, even without personal data. The general 7-day, 52-week and up-to-5-year backup rotation does not override these rules. On Amazon notice, targeted information must be deleted or returned within 72 hours; all online or network-accessible instances, including affected backups, must be securely deleted within 90 days. A documented dispute is not a blanket exemption; any conflict with a legal obligation is reviewed individually.

The Amazon connector remains disabled until erasure of the data, derivatives and accessible copies has been validated. OpenAI is disabled on the SUFET Ads pilot. No Amazon profile, campaign or KPI is sent to OpenAI. That processing requires written confirmation from Amazon and verified provider safeguards; user consent or a no-training setting alone is not enough.

The Ads pilot and encrypted backups are hosted with Infomaniak, separately from the public website. Applicable external and internal Ads service connections use certificate-verified TLS. Report suspected security issues to security@sufet-tt.com.