Data Deletion

You can delete your CoolBeans account at any time using either of these methods:

In-app (fastest). Sign in at www.coolbeanscrm.com, go to Settings → Account → Delete account, and confirm. Your data is marked for deletion immediately and permanently removed after a 30-day recovery window.

By email. Send a deletion request from your CoolBeans-registered email address to privacy@coolbeanscrm.com. We will process the request within 5 business days and confirm once your account has been marked for deletion.

When you delete your account, CoolBeans removes:

• Your user profile (name, email, phone, preferences).
• All contacts, leads, deals, and activity history you created or were assigned to.
• All campaigns, automations, templates, and saved views you created.
• All messages (email, SMS, chat) you sent or received via CoolBeans.
• Your cloned voice profile at ElevenLabs (the underlying voice model is deleted via the ElevenLabs API at the same time).
• All Google OAuth grants CoolBeans holds on your behalf (Gmail, Calendar) — these are revoked at Google's OAuth endpoint so they no longer appear on your Google Account permissions page.
• All Nylas grants and message metadata associated with your account.
• Your Supabase Auth session and credentials.

Day 0: You request deletion. Your account is immediately marked as deleted — you cannot sign in. Google and Nylas OAuth grants are revoked. Your ElevenLabs voice model is deleted.

Days 1–30: Recovery window. If you change your mind, contact privacy@coolbeanscrm.com from your registered email address and we can restore your account. (OAuth grants and voice models will need to be re-connected manually — those revocations are immediate and irreversible.)

Day 30: A scheduled job purges your row and all cascaded child records from the database. After this point, recovery is not possible.

Some data is retained beyond the 30-day window for legal, billing, or operational reasons:

• Billing records — Stripe invoices and tax records are retained for 7 years per Canadian tax law.
• Anonymized audit logs — security-relevant events (login attempts, OAuth grants/revokes, admin actions) are retained for 12 months in stripped-of-PII form for incident response.
• Aggregated usage metrics — counts of features used, with no per-user identifiers.

If you have any questions about deleting your data, or if you believe your data has not been deleted within the timeline above, contact us at privacy@coolbeanscrm.com. We respond within 5 business days.