Legal
Data & deletion requests
One address, a defined process, and a deadline we hold ourselves to.
Last updated: September 3, 2026
What you can ask for
| Request | What you get |
|---|---|
| Access | A description of the personal information we hold about you, where it came from, why we hold it, and who we have shared it with |
| Portability | A copy of your data in a structured, machine-readable format |
| Correction | Inaccurate information corrected |
| Deletion | Your data deleted from our systems and from our service providers, except where the law requires us to keep it |
| Disconnection | A connected platform disconnected and the data retrieved from it deleted within 30 days, or sooner where that platform’s policy requires |
How to make a request
- Email navendu@smbtiller.com with the subject line Data request.
- Tell us which request you are making, the business account it concerns, and the email address associated with it.
- We will acknowledge within 5 business days and may ask you to verify your identity — we will only ask for what is needed to confirm you are who you say you are.
- We will complete the request within 30 days. If it is complex we may extend once, by up to a further 30 days, and will tell you why before the first period ends.
There is no charge. If a request is manifestly unfounded or repetitive we may decline it, and we will explain why.
If your data sits inside a customer’s account
For data we hold on behalf of a business customer, that business is the controller and we are the processor. If you are that business’s customer or employee, send your request to them first. If you send it to us, we will forward it promptly and support them in answering it — we will not act on it unilaterally, because it is not our data to release or erase.
Deleting connected platform data
Revoking an authorization — in the platform itself or by asking us — stops all further retrieval immediately. Data already retrieved is deleted within 30 days, or sooner where the originating platform’s policy or your instruction requires. Where a platform requires us to delete on a shorter schedule than our own, the shorter one applies.
Backups are overwritten on their normal cycle. Data in a backup is not restored to production after a deletion request.
Escalation
If you are not satisfied with our response, reply to our email and ask for it to be escalated. You also have the right to complain to your data protection authority, and California residents may contact the California Privacy Protection Agency or the California Attorney General.
Related
Our privacy policy sets out what we collect, how long we keep it and who we share it with. Our terms of service cover account and authorization responsibilities.