Data Deletion Instructions

You have the right to request deletion of your personal data at any time, free of charge. In Brazil this right is set out in art. 18 (V) of the LGPD. In the European Union, in art. 17 of the GDPR ("right to erasure" / "right to be forgotten"). In California, in the CCPA/CPRA Right to Delete.

Voyspark honors this right free of charge, transparently and within a reasonable timeframe. You may request deletion of your entire account or just specific categories of data, as detailed below.

Three methods are available. We recommend Method A (self-service) as it is the fastest.

Method A — Self-service (fastest): sign in to voyspark.com → My Account → Settings → "Delete my account". You will receive a confirmation email to validate the request. Once confirmed, your account enters soft-delete immediately and final deletion occurs within 30 calendar days.

Method B — Email: send a request to privacy@voyspark.com with the subject "Deletion Request". Include the email registered on the account and, if possible, the username. We reply within 5 business days and complete the deletion within 30 days.

Method C — OAuth login (Facebook, Google or Apple): if you signed up via social login, you can revoke Voyspark’s access directly with the provider: Facebook → facebook.com/settings → Apps and Websites; Google → myaccount.google.com → Security → Third-party apps with account access; Apple → appleid.apple.com → Sign in with Apple. Important: revoking OAuth only disconnects the social login — it does NOT delete your Voyspark account. To delete the entire account, also use Method A or B.

Meta callback: when you remove Voyspark at facebook.com/settings → Apps and Websites, Facebook automatically sends a Data Deletion Callback to Voyspark. We receive the signal, open a ticket and process the deletion of the data associated with your Facebook ID within 30 days, returning the confirmation status code required by Meta.

When you request account deletion we remove: full profile (email, name, avatar, bio, country, language); Trip Plans, saved itineraries and Taste Genome answers; posts, comments, reviews and Trip Diaries published in the community; messages exchanged with Voyspark AI; search and browse history linked to your internal ID (vid — visitor id); notification preferences and settings; active sessions across all devices; and associated OAuth data (Google sub, Facebook ID, Apple sub).

Public content you posted in community areas is depersonalized: authorship is anonymized or removed, keeping only the text when relevant for the aggregated editorial record. You may opt for full content removal at the time of request.

Some data is kept for the minimum period required by law, even after a deletion request: transaction and tax data (invoices, receipts, Stripe payment status) are retained for up to 5 years, in compliance with art. 195 of Brazilian Law no. 5,172/66 (CTN) and equivalent tax obligations in the European Union.

Security and audit logs are anonymized and kept for up to 6 months, per art. 13 and 15 of the Brazilian Internet Civil Framework and equivalent EU guidelines. Data tied to ongoing disputes (chargebacks, regulatory complaints, court proceedings) is retained until the case is resolved. Such data is not used for purposes other than those required by law.

Request acknowledgement: within 5 business days. Full deletion in primary systems: within 30 calendar days. Removal from rotating backups: within an additional 90 days (backups are overwritten in the regular cycle and not accessed during that period except for disaster recovery).

For European data subjects these timelines respect GDPR art. 12 (response within 1 month, extendable by 2 additional months in complex cases, with notice to the data subject).

Preferred channel for deletion requests: privacy@voyspark.com. General legal questions: legal@voyspark.com. Data Protection Officer: dpo@voyspark.com.

If you are unsatisfied with our response, you have the right to lodge a complaint with the competent data protection authority: ANPD in Brazil (anpd.gov.br), CNIL in France (cnil.fr), AEPD in Spain (aepd.es), Garante in Italy (garanteprivacy.it), BfDI in Germany (bfdi.bund.de), CNPD in Portugal (cnpd.pt), ICO in the United Kingdom (ico.org.uk) or California Privacy Protection Agency in the US (cppa.ca.gov).