Request
Email privacy@rulecerta.com from the address on your RuleCerta account when possible.
Include: your account email, the type of request (delete account, delete workspace data, export, or correction), workspace name or id if relevant, and whether connectors should be disconnected.
Do not send passwords, API keys, connector private keys, or unrelated secrets.
Verification
We may ask you to verify identity and ownership (for example confirming control of the account email or workspace owner role) before deleting or exporting data.
Requests from addresses that cannot be linked to an account may be refused or limited.
Scope — account
Account deletion removes or disables your login and personal account association after verification.
If you are the last owner of active workspaces, we may require you to transfer ownership, archive workspaces, or authorize workspace deletion as part of the same request.
Scope — workspace and product data
Workspace archive freezes operations; it is not the same as irreversible deletion.
Full workspace deletion (environments, connections, audits, findings, reports, and artifacts) is handled as a verified request.
Disconnecting a connection removes stored connector credentials.
Export and correction
You may request an export or correction of personal account data and, where feasible, workspace data you are authorized to access.
Export and correction requests are handled through privacy@rulecerta.com after verification.
Retention exceptions
Some copies may remain in infrastructure backups for a limited vendor-defined period after primary deletion.
Security or abuse records may be retained where required for security and legal obligations.
Confirmation
After we verify and process a request, we will confirm by email to the address used for the request (typically via privacy@rulecerta.com).
Timing depends on verification complexity and the scope of data involved.