Support

Data Request

Exercise your privacy rights: access, download, correct, or delete your data.

Last updated: January 1, 2026

We respect your privacy rights. Depending on your location, you may have the right to access, correct, delete, or export your personal data. This page explains how to submit data requests and what to expect.

Your privacy rights

Right to Access

Request a copy of the personal information we have about you, including uploaded photos (if still stored), account data, and order history.

Right to Correction

Request correction of inaccurate personal information, such as your name or email address.

Right to Deletion

Request deletion of your personal information. Note: Some data may be retained for legal or tax purposes as described in our Privacy Policy.

Right to Data Portability

Request your data in a machine-readable format (JSON or CSV) that you can transfer to another service.

Right to Opt-Out

Opt out of certain data uses. Note: We do not sell your data or use it for targeted advertising.

How to submit a request

  1. Email privacy@smileplease.app with subject line "Data Request."
  2. Include the following in your email:
    • Your name
    • Email address associated with your SmilePlease account
    • Type of request (access, correction, deletion, export, or opt-out)
    • Any specific details (e.g., what data to correct)
  3. We will acknowledge your request within 48 hours.

Identity verification

To protect your privacy, we verify your identity before processing requests. We may ask you to:

  • Confirm your email by clicking a verification link we send.
  • Answer security questions based on your account activity.
  • Provide additional documentation for sensitive requests.

We will never ask for your password or full payment card number.

Processing timeline

  • Acknowledgment: Within 48 hours of receiving your request.
  • Verification: 1-3 business days.
  • Completion: Within 30 days of verification (as required by GDPR and CCPA).
  • Extensions: In complex cases, we may extend by an additional 30 days with notice.

What data we can provide

Depending on your request, we can provide:

  • Account data: Email, account creation date, authentication records.
  • Order history: Order IDs, dates, items purchased, shipping addresses.
  • Photos: If still stored (uploaded photos: 10 days; generated portraits: 30 days or 12 months if purchased), we can provide your original uploads and generated portraits.
  • Usage data: Login history, device information, interaction logs.

Data is provided in JSON, CSV, or PDF format based on your preference.

Deletion limitations

Some data cannot be deleted due to legal requirements:

  • Order records: Retained for 7 years for tax and legal compliance.
  • Payment records: Maintained by Stripe per their retention policy.
  • Legal holds: Data subject to active legal proceedings or investigations.

We will inform you if we cannot fully comply with a deletion request and explain the reason.

Authorized agents

You may authorize someone to submit a request on your behalf. Authorized agents must provide:

  • Written authorization signed by you.
  • Proof of identity for both you and the agent.
  • Contact information for verification.

Parents or legal guardians may submit requests on behalf of children under 18 by providing proof of guardianship.

California residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act. You may:

  • Know what personal information we collect and how it's used.
  • Request deletion of your personal information.
  • Opt out of the sale of personal information (we do not sell your data).
  • Non-discrimination for exercising your rights.

To make a California-specific request, email us with subject "California Privacy Request."

European residents (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation, including:

  • Right to access, rectification, and erasure.
  • Right to restrict or object to processing.
  • Right to data portability.
  • Right to lodge a complaint with a supervisory authority.

Questions?

For questions about data requests or privacy, contact us at privacy@smileplease.app.

Related policies