Delete your account and data

You can delete your OtisIO account yourself, from inside the product, without contacting anyone. This page explains how, what is removed, and what happens in the cases where self-service deletion is not available.

Delete your account in the app

Open the app and go to the Settings tab. Delete account is the last item on that screen, below Sign out. Tap it and follow the confirmation steps. On the website, the same control is at the bottom of your own profile page. Deletion takes effect immediately.

What is deleted

Your login, your personal profile details (name, email, phone, photo, emergency contacts), your device registrations and notification tokens, and your marketing consents are removed. Records your workplace is legally required to keep, such as hours worked and pay history, are retained by the business that runs your workspace: that business is the data controller for workspace records, and requests about them are routed to it, as described in our privacy policy.

How long deletion takes

Deletion from the live system is immediate: once you confirm, the account is gone and cannot be signed into. Some copies survive longer, and none of them is reachable by anyone using the product.

Backups. We keep short-term database dumps on the production server and encrypted copies off-site, taken daily and thinned out to weekly and then monthly snapshots as they age. A copy of your data can therefore persist in the off-site backup history for up to two years before the last snapshot containing it is discarded. We do not edit backups to remove individual records, because a backup that could be edited would not be a backup, and we do not restore one to recover a deleted account.

Security and audit records. Records of sign-ins to your workspace, which show the device and approximate location a session came from, are kept for 400 days and then deleted automatically. Records of administrative actions inside a workspace, such as an approval, a pay-rate change or a permission change, are kept for as long as that workspace exists, because they are the workspace's own evidence of what its managers did and deleting them on a timer would destroy the employer's records rather than yours.

After that, nothing of yours remains, except any workspace records your employer is legally required to keep, described above.

Delete your face data

If your employer uses face clock-in and you have enrolled, you can delete your face data on its own, without deleting your account. In the app, go to Settings and open the face clock-in section, then remove your enrolment. That deletes your face template and any enrolment images stored with it, and kiosks paired to your workplace drop you at their next sync. Any administrator in your workspace can also do it for you. Clock-in photos and unmatched kiosk frames already recorded against your timesheet are removed on their own retention schedule, which is described in the privacy policy; ask your employer or us if you want them removed sooner.

If the app will not let you delete

If you are the workspace owner, the product asks you to transfer ownership or close the workspace first, so a business account is never orphaned by accident. The app explains the exact blocker on the deletion screen.

Ask us instead

If you cannot use the app, or you want us to handle it, email hello@otisio.com from the address on your account and we will complete the deletion and confirm when it is done.