Account Deletion & Retention
Proposed policy
Deleting an account should remove its public profile and personal photos/videos without creating a way to erase reputation and rejoin as a new person. This workflow is not yet fully implemented. A metadata “deleted” flag is not proof that files have been physically removed.
Photos and videos
The target process revokes access, deletes original uploads and generated copies, and tracks failed cleanup until confirmed complete. Processor copies and backups need a documented expiry schedule. Already issued download links may remain usable until they expire; copies independently saved by other people cannot be remotely erased. Shared business assets require ownership review.
Limited reputation retention
We propose retaining necessary scores, reviews, dispute evidence and minimal account-linking records privately for up to 36 months from account deletion. The purposes are preventing replacement-account abuse, investigating disputes and correcting mistaken identity matches. These records are not intended for marketing or continued public display of a deleted profile.
Why 36 months
People may use GIGtrunk seasonally or return after long breaks. Thirty-six months is a proposed maximum, not a statutory requirement or proven minimum. Review actual dispute timing and repeat-account evidence at least annually and shorten retention when no longer necessary.
Disputes and returning users
Users should be able to challenge review accuracy and incorrect account matches after deletion, without restoring a public profile. Link a returning user only using verified evidence and review where needed. Names, shared networks and recycled phone numbers alone do not prove identity. A name change does not reset existing ratings.
Expiry and exceptions
At expiry, delete or irreversibly anonymize retained records. A documented unresolved dispute or legal obligation may justify keeping only the relevant evidence longer, with access limits and a review date. Do not restart the clock merely because someone submits a privacy request. Applicable deletion rights may require earlier action.
Implementation and review
Physical cleanup, derivative/backup schedules, post-deletion verification and appeals, automated expiry and reviewed reputation corrections must be completed before this becomes an operating promise. Counsel must validate lawful retention and disclosure. Until a public privacy contact is confirmed, signed-in beta support is the available request channel; it is not a substitute for the planned post-deletion route.