Aimee Says Data Deletion Policy

Effective: October 13, 2026 | Aimee Says Inc., a Delaware corporation

1. Your right to deletion

You may request the deletion of personal information we hold about you. We honor deletion rights under, among others: the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Privacy Rights Act (CPRA), the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, the Texas Data Privacy and Security Act, the Oregon Consumer Privacy Act, the Montana Consumer Data Privacy Act, the Delaware Personal Data Privacy Act, the Tennessee Information Protection Act, and other applicable laws.

2. How to request deletion

You can remove your data in two ways in the Security tab under Settings: wipe your data and delete your account, or wipe your data while keeping your account. Because these actions are taken from your signed-in account, your authenticated session confirms the request and no separate identity verification is required. You may also email support@aimeesays.com with the subject "Data Deletion Request."

3. What deletion means

In this Policy, "delete," "deletion," "erase," and "wipe" mean we permanently overwrite the identifying and content fields described below, replacing the original values so they cannot be recovered or reconstructed from our production systems. Original data may persist briefly in disaster-recovery backups - see Section 4.

On a deletion request we overwrite:

·       all user-created or provided content and identifiable AI-derivatives, such as chat summaries and user memory

·       name and email address

We retain and do not overwrite:

·       payment records held by Stripe under applicable tax and anti-money-laundering law, typically 7 years

·       audit logs of the deletion request itself, kept as proof of compliance

·       non-identifiable activity metadata - such as timestamps, character counts of content fields, classifications identified, and automated safety-screening results (category flags and scores)

4. Backups

We maintain backups of our production systems for disaster-recovery purposes. Deleted data may persist in those backups for up to 14 days after deletion before it is purged.

5. Timing

5.1 Self-serve deletion

When you delete your account or wipe your data in Settings, the deletion is immediate. In the rare case that automated processing does not complete, we will ensure it is finished manually within 24 hours.

5.2 Requests by email

We aim to confirm deletion within 30 days and will not exceed 45 days. If we need additional time, we will explain why and give you an updated timeline.

6. Subprocessors

We use third-party providers to operate Aimee Says. Some of them retain limited data under their own retention schedules or as required by law - for example, Stripe retains your financial records under tax and anti-money-laundering law (typically 7 years). We do not control how long a provider keeps data in its own systems, and we work to minimize what they hold.

Our AI provider. For signed-in accounts, our AI provider does not retain your content, so it holds nothing to delete. The one exception is images its systems flag as possible child sexual abuse material, which the provider keeps for review. Anonymous chats are handled differently: the provider may keep encrypted safety copies that become unreadable after 30 days. Because anonymous chats are not linked to an account, we cannot locate or delete them on request. See Section 9 of the Privacy Policy.

7. Inactive free accounts

A free account inactive for 365 consecutive days (no account activity, chat sessions, document uploads, Events created, or Binders created) will be deleted after 14 days of advance email notice.

8. Data export before deletion

You can export much of your data yourself in the app: Events, chats and documents in bulk, and Binders individually. We encourage you to do this before deleting anything. For data not available through the in-product tools - email support@aimeesays.com and we will provide it in a commonly used electronic format. Because deletion permanently overwrites your content, export your data before you delete it; once deleted, it cannot be recovered or exported.

9. Confirmation

If you delete your account or wipe your data in the app, the result is immediate - we do not send an email. If you requested deletion by email, we will reply to confirm once it is complete.

10. Further inquiries

For questions about this Policy or any privacy matter: support@aimeesays.com.

© 2023-2026 Aimee Says Inc. All rights reserved.