Account Deletion
An admin can delete their SAR Portal account at any time. This guide explains the process and what happens to your data.
Deleting an account is Admin-only. Case Managers, Reviewers and Read Only users cannot open the Delete Account page; if one of them wants their account removed, an Admin deletes them from the Users page (see User Management).
Types of Deletion
There is one Delete Account page. What it deletes depends on whether you are the last admin:
Your Own Account (another admin remains)
If your organization has at least one other admin:
- Your account is removed from sign-in and from SAR Portal
- The organization’s cases and data are preserved
- The organization continues operating
- Other users are unaffected
Whole Organization (you are the last admin)
If you are the only admin:
- The entire organization is deleted
- All users are removed, including Case Managers, Reviewers and Read Only users
- All data is deleted
- The subscription is cancelled
You do not need to remove the other users first.
Opening the Delete Account Page
- Go to Settings → Advanced
- Scroll to Danger Zone
- Next to Delete Account (“Permanently delete your organization and all associated data”), click Delete Account
The page shows a warning and a list of what will be deleted. If you are the last admin, it shows Critical Warning: You are the last administrator and lists how many user accounts and cases will be deleted, plus your document storage.
Deleting Your Own Account
Requirements
- You are an admin, and at least one other admin remains
- Your email is not the organization’s contact email. If it is, change Contact Email in Settings → Organization → Company Details to another admin’s email first
Process
- Open the Delete Account page (see above)
- Read the Account Deletion Warning
- Fill in Why are you deleting your account? (required)
- Tick both boxes:
- “I understand that this action is permanent and cannot be undone”
- “I confirm that I want to exercise my right to erasure under EU & UK GDPR Article 17”
- Click Delete My Account Permanently
The button stays disabled until the reason is filled in and both boxes are ticked. Click Cancel to go back to Settings.
What Happens
- Your account is deleted and you are signed out
- Your sign-in is removed
- You receive a confirmation email
- Your email address in audit entries is replaced with “[Redacted]” and IP addresses and browser details are removed; entries stay linked to an anonymous identifier
- The organization’s cases remain (for compliance)
Deleting Your Organization
Warning
This action is irreversible and deletes:
- All cases and documents
- All user accounts
- All settings and configurations
- All stored data
Requirements
- You must be the only remaining admin
- No case may be on legal hold. If one is, nothing is deleted and the page tells you to release the legal hold first
Process
- Open the Delete Account page (see above)
- Read the Critical Warning: You are the last administrator and the list of what will be deleted
- Click Download All Case Data (JSON) if you want a copy of your case data
- Fill in Why are you deleting your account? (required)
- Tick both boxes:
- “I understand that this action is permanent and cannot be undone”
- “I confirm that I want to exercise my right to erasure under EU & UK GDPR Article 17”
- Click Delete My Account Permanently
What Happens
Deletion from the live service is immediate and cannot be undone by you. Backup copies expire within 14 days (files) and 7 days (database) and are never restored for you. As soon as you confirm:
- Stripe subscription cancelled (no more charges)
- All cases permanently deleted (not anonymized)
- All documents and redacted versions permanently deleted
- All blobs removed from storage
- All user accounts removed
- The organization record removed
- You are signed out
Kept afterwards:
- Audit logs, kept for your audit-log retention period (7 years by default) to defend legal claims (GDPR Article 17(3)(e)). Email addresses, IP addresses and browser details are removed; requesters’ names in case-change entries remain, so this is still personal data
- Billing records, for at least 6 years under Irish tax law
Before Deleting
Consider
- Export any data you need
- Download important documents
- Save audit logs for your records
- Inform your team
Data Export
Before deletion:
- Export each case from its case page (Export as JSON or Export as PDF). If you are the last admin, you can also use Download All Case Data (JSON) on the Delete Account page
- Download needed documents
- Export audit logs with Export CSV on the Audit Logs page
Data export stays available while your subscription is restricted (GDPR Article 20).
Subscription
When organization is deleted:
- Subscription is cancelled immediately
- No further charges
- No automatic refund for unused time; contact support@sarportal.com with any refund question
What Happens to Your Data
Personal Information
User Data:
- Email, name: Deleted
- Login credentials: Removed
- Profile data: Removed
Organization Data:
- Company info: Deleted
- Settings: Deleted
- Branding: Deleted
Case Data
On full organization deletion, cases are deleted outright - not anonymized:
Cases:
- Entire case records: Permanently deleted
- Subject names, emails, phone numbers, notes: Deleted with the case
Documents:
- Original files: Permanently deleted
- Redacted versions: Permanently deleted
- File metadata: Removed
(Email hashing applies to the separate case-anonymization feature used when you close a case but keep your account - not to full organization deletion.)
Audit Logs
Kept for your audit-log retention period (7 years by default):
- Action records, with email addresses, IP addresses and browser details removed; requesters’ names in case-change entries remain, so this is still personal data
- For legal defense purposes
Basis: GDPR Article 17(3)(e) - establishment, exercise or defence of legal claims
Deletion vs Cancellation
Deleting your organization is not the same as canceling your subscription:
| Cancel subscription | Delete organization | |
|---|---|---|
| Billing | Stops | Stops (Stripe auto-cancelled) |
| Your data | Kept read-only, with export available, for 90 days, then permanently deleted (we email you 10 days before) | Deleted immediately and permanently |
| Reversible | Resubscribe within 90 days to resume | No - cannot be recovered |
If you simply want to stop paying but might return, cancel instead of deleting. See Plans & Pricing for cancellation details.
When You Delete an Organization with an Active Subscription
- The Stripe subscription is cancelled immediately as part of deletion
- No further charges
- No automatic refund for unused time
Trial Accounts
- Can delete anytime
- No charges involved (no card on file)
- Data deleted per the normal process above
Recovering Deleted Accounts
User Accounts
Cannot be recovered. Another admin can invite you again if needed.
Organizations
Cannot be recovered. Would need to:
- Register as new organization
- Start fresh
- Re-upload any needed data
GDPR Rights
This deletion process satisfies:
- Article 17 - Right to erasure
- Your right to have data deleted
- With documented retention per Article 17(3)(e)
Related
- User Management - Removing other users
- Roles & Permissions - Who can delete accounts
- Plans & Pricing - Cancelling instead of deleting
Getting Help
If you have questions about deletion:
- Email: support@sarportal.com
- Review this documentation
- Consider data export first
Alternatives to Deletion
Before deleting, consider:
Downgrade Plan
- Move to the Basic plan (€29/month ex VAT) to cut costs while keeping access and data
- The minimum paid plan is Basic - there is no free tier
Cancel Instead of Delete
- Stops billing but keeps your data read-only for 90 days, then it is permanently deleted
- Export everything you need during that window
- Resubscribe within 90 days to resume
Remove Users Instead
- If only some people should lose access, delete them from the Users page
- The organization and its data stay as they are
- Plans are priced per plan, not per user, so this reduces access, not cost
Export and Archive
- Export important data (each case as JSON or PDF; all case data as JSON from the Delete Account page)
- Then delete if needed
- Maintain records externally