कानूनी
Account Deletion
You can start deleting your account from the web or from inside the app at any time. This page explains what gets erased, what is kept, how long it takes, and the subscription step you must handle first.
संस्करण v1.0.1प्रभावी तिथि 2026-08-18अंतिम अपडेट 2026-08-18अंग्रेज़ी में दिखाया गया
यह दस्तावेज़ अंग्रेज़ी में दिखाया गया है क्योंकि हिन्दी अनुवाद अभी उपलब्ध नहीं है। अंग्रेज़ी संस्करण ही मान्य होगा।
1. How to start
- On the web: go to the account deletion page and complete the three confirmation steps. No app install needed.
- In the app: Me → Account & Security → Delete account, the same flow.
- By email: if you can no longer sign in (for example you lost your only login method), email legal@tpvpn.com with your @handle and whatever shows the account is yours. We will verify manually.
2. Two things to do first
Deleting your account does not cancel an App Store or Google Play subscription. Those are managed by Apple and Google and we cannot cancel them for you — if you skip this step the store keeps charging you even after the account is gone. Cancel first in iOS Settings → Apple Account → Subscriptions, or in the Play Store under Subscriptions, then come back and delete.
Deleting your account does not trigger a refund. Any remaining subscription time is forfeited. If you want your money back, request it first under the Refund Policy and wait for it to complete, then delete — once the account is gone we lose the links needed to match the order to you, which makes refunds much harder.
3. Two kinds of deletion
The deletion page asks you to choose. Most people want the second, but the first is the right one if you just want the history gone and intend to keep using the Service.
| Erase my data | Delete the account | |
|---|---|---|
| Account kept? | Yes — you can keep signing in | No — every login method is unlinked |
| @handle | Kept | Released (available to others after 90 days) |
| Session and connection records | Erased immediately | Erased |
| Devices and WireGuard public keys | All removed | All removed |
| Support ticket history | Erased | Erased |
| Subscription entitlement | Kept | Ended |
| Reversible? | No — erased is erased | Yes, during the 30-day cooling-off period |
4. What is erased, what is kept
Erased
- Profile data: @handle, country of registration, account status, internal notes.
- Linked login methods — we also ask our identity provider (Privy) to delete its records.
- All device records and the WireGuard public keys you registered (peer configuration is removed from nodes within minutes).
- Session records, connection event logs and the traffic detail tied to your account.
- Support tickets and their messages.
- Personal identifiers in referral relationships (the referral count is kept in anonymised form so rewards other users already earned are not rolled back).
Kept, and why
| What | For how long | Why |
|---|---|---|
| Order, payment and refund records | 7 years after the transaction (or longer if tax law requires) | A statutory financial and tax duty; minimised to the fields the law requires |
| Aggregated traffic statistics | Expires naturally within 13 months | Already aggregated without identifiers and cannot be re-linked to you |
| Administrative audit trail | 3 years | It records what our staff did, append-only and immutable — it holds us accountable |
| Ban marker (irreversible hash) | Indefinite | Only where the account was terminated for a serious breach, to stop instant re-registration; contains no recoverable personal data |
| Records subject to legal process | Until proceedings conclude | Where a valid preservation obligation applies |
5. Timeline
| When | What happens |
|---|---|
| Immediately | All devices are disconnected, nodes revoke your peer authorisation, the account enters "pending deletion" and can no longer connect |
| Day 0 – 30 | Cooling-off period. You can cancel via the link in the email and restore the account. We remind you on day 1 and on day 23 |
| Day 30 | Deletion executes: everything listed under "Erased" is removed from the production database, irreversibly |
| Day 30 – 120 | Residual copies on backup media expire as backups rotate — gone within 90 days at the latest |
| On completion | We send a confirmation to your original email address — the last message you will get from us |
If you want to skip the cooling-off period, tick the option on the deletion page or email legal@tpvpn.com after submitting. Note that immediate deletion cannot be undone.
6. Verifying it is you
Deletion is irreversible, so we have to be sure the request is yours. Verification means signing in once with any login method already linked to the account — email code, wallet signature, Apple ID, Telegram or passkey. We will never ask you to upload an identity document or a selfie.
If you cannot sign in: email legal@tpvpn.com with your @handle, a recent order id or the last four digits of the payment instrument, and the domain of the email you registered with. We verify manually and, where needed, confirm through the originally linked channel.
7. Common questions
- Can I sign up again with the same email?
- Yes, unless the account was terminated for a serious breach. But it is a brand new account: no subscription, no referral history, nothing carried over — and the @handle only becomes available again 90 days after release.
- Can I erase only my connection history?
- Yes — choose "Erase my data". Note that session records expire after 90 days and connection logs after 30 days anyway, so they disappear on their own if you do nothing.
- Do you keep my browsing history?
- No — it was never collected. No browsing activity, no DNS queries, no destinations, so there is nothing of that kind to delete. See Privacy Policy §2.
- How does an Enterprise account get deleted?
- Enterprise accounts involve multiple seats and contractual duties. The administrator should contact legal@tpvpn.com and we follow the process set out in the contract.
संशोधन इतिहास
- v1.0.1 · 2026-09-02 · Added the Traditional Chinese (Hong Kong) translation