Data deletion and revoking access

Revoke access from your Google Account

You can cut off Right at Hand's Gmail access entirely from Google's side, without opening Right at Hand:

• Go to myaccount.google.com/connections (Google Account → Security → Third-party apps & services).
• Find Right at Hand and remove its access.

From that moment our stored credential no longer works: no further reading, syncing or sending is possible.

Disconnect Gmail inside Right at Hand

The product has a built-in disconnect: Settings → Email accounts → Disconnect. A personal mailbox can be disconnected by the person who connected it; a shared mailbox by a workspace owner or admin. Disconnecting:

• asks Google to revoke the credential (best effort),
• deletes our encrypted stored copy of the credential, and
• stops all syncing for that mailbox.

Delete your account and stored data

A workspace owner can delete everything from inside the product: Settings → Workspace → Delete this workspace and all its data. You type the workspace name to confirm; the deletion runs right away and reports how much was removed. In one action it:

• asks Google to revoke access for every connected mailbox and destroys our encrypted copies of those credentials,
• deletes every uploaded file from private storage (knowledge documents and draft attachments), and
• deletes every stored record for the workspace: synced messages and threads, drafts, scheduled sends and follow-ups, projects, notes and tasks, knowledge documents, AI analyses and chats, writing profiles and style rules, business profile, usage and audit records, memberships and invitations, and the workspace itself.

Your mail in Gmail is untouched — Right at Hand only ever holds a synced copy.

When a deletion request is completed, the covered data is removed from Right at Hand's active production systems. Residual copies may remain temporarily in encrypted backups until those backups expire or are overwritten in accordance with our backup-retention processes.

If you are not an owner, or you want a personal account (rather than a workspace) removed, email sales@upweb.com from the address on your account. We verify that the request comes from the account holder, then delete the account and the data it controls. Content in a shared workspace you do not own remains under that workspace owner's control.

What cannot disappear instantly

• Backups. Our infrastructure provider keeps database backups for a limited period; deleted data ages out of those rather than being individually removable.
• Security and audit records. Append-only audit and security logs may be retained where needed to protect the service or meet legal obligations.
• Founding-access applications. Deleted on request — tell us in the same email if you want your application removed too.

What to expect from the process

We acknowledge deletion requests, verify them and action them promptly. We do not currently commit to a fixed turnaround time, because we will not publish a number we have not operationally proven — if a request is taking longer than you expect, reply to the thread and we will tell you where it stands.

Revoking access vs deleting stored data

Revoking Google access (either method above) stops Right at Hand from reading or sending anything new. It does not remove the content that was already synced into your workspace — that content stays available to you in the product.

Deleting stored data removes what Right at Hand holds in its active production systems; residual copies age out of encrypted backups as described above. Your mail itself always remains safe in Gmail; Right at Hand only ever holds a synced copy. For complete removal: revoke or disconnect first, then request account deletion.