Account & Data Deletion

This page explains how to request deletion of your Critical Path Group account and associated data, what is deleted, and how long any residual records are retained. It applies to both the Command web dashboard and the Command mobile app (iOS and Android). The Command mobile app is a companion to your web account, so account and data deletion is handled through your Command account.

How to request deletion

You can request deletion of your account and data in either of the following ways:

• From your account settings (fastest): Sign in to the Command web dashboard at command.criticalpath.group, go to Settings → Account, and select Delete Account. You will be asked to confirm.
• By email: Send a request to [Enable JS to see email] from the email address associated with your account, with the subject line "Delete My Account and Data." We may take reasonable steps to verify your identity before processing the request.

If you use the mobile app, sign out is available any time from the app's Settings; to delete your account and data, use either method above.

What gets deleted

When a deletion request is completed, we permanently remove the personal and business data associated with your account, including:

• Your account and profile information (name, email, organization details, credentials)
• Financial data you uploaded or entered (P&L, balance sheet, general ledger, pipeline and contract data)
• Generated reports and AI-generated content tied to your account
• "Ask Command" conversation history
• Mobile device push notification tokens registered to your account

Deletion timeline

After you confirm a deletion request, your account enters a 30-day grace period during which you may cancel the request by signing back in. If you do not cancel, all data described above is permanently deleted after 30 days and cannot be recovered.

Data we retain, and for how long

For legal, security, and accounting reasons, a limited set of records is retained on the schedule below. These records are minimized and, where applicable, stripped of personal identifiers:

• Audit logs: Retained for 1 year, then permanently deleted. Personal identifiers (such as email and IP addresses) are redacted from audit-log detail fields before storage.
• Compliance records: Retained for 2 years where required by regulatory obligations.
• Payment/billing records: Transaction records required for tax and accounting are retained as required by law. Card numbers are never stored by us (payments are processed by Stripe).
• Anonymized benchmarking data (opt-in only): If you opted into Azimuth benchmarking, data already anonymized through a one-way transformation remains in aggregate pools. It contains no identifiers and cannot be traced back to you or your organization.

For the full retention schedule, see Section 3 of our Privacy Policy.

Questions

For any question about deleting your account or data, contact:

Critical Path Group, LLC
Email: [Enable JS to see email]
We will respond to your request within 30 days.