Data Deletion & Retention
Updated August 28, 2026
You can disconnect Hardroad from any service you connected, and you can have the data we hold about you deleted. This page explains exactly how, what happens, and how long each step takes. It applies alongside our Privacy Policy.
Disconnecting Google
Google Calendar
In Hardroad, go to Settings → Calendars and choose Disconnect on the account you want to remove. This takes effect immediately: the stored Google token is deleted, the calendar records for that account are deleted, and Hardroad stops reading from and writing to that Google Calendar.
Events that already synced into your Hardroad planner are not removed by disconnecting — they remain part of your planning history so your past weeks still make sense. To remove those too, delete them in the app or ask us to delete your account using the form below.
Google Contacts
Revoke the contacts permission from your Google account at myaccount.google.com/permissions, or email us and we will remove the stored token for you. Contacts you chose to import are Hardroad contacts from that point on: you can delete them individually in Settings → Contacts, or ask us to delete them all.
Revoking everything at Google
Whatever you connected, you can cut off all Hardroad access at any time from myaccount.google.com/permissions. That stops future access immediately. It does not delete data Hardroad has already synced — use the request routes below for that.
Deleting your data
Email privacy@hardroad.app from the address on your Hardroad account and tell us what you want removed. You can ask for:
- Google data only — stored Google tokens, synced calendar events, and contacts imported from Google. Your Hardroad account and everything you created in it stays.
- Your whole account — every record we hold about you, including tasks, goals, habits, journals, contacts and calendar data.
- A copy of your data before deleting, if you want to keep it.
We acknowledge requests within 3 business days and complete them within 30 days. If we need to verify that the request came from you, we will say so in the acknowledgement.
Deletion is permanent and cannot be undone. Encrypted backups are rotated on a rolling schedule and any residual copies age out within 90 days of the deletion. We may keep the minimum records we are legally required to keep — for example billing and tax records — and nothing else.
What we keep, and for how long
| Data | Kept for |
|---|---|
| Google OAuth tokens | Until you disconnect, revoke access at Google, or delete your account |
| Synced Google Calendar events | Until you delete them in the app or delete your account |
| Contacts imported from Google | Until you delete them in the app or delete your account |
| Tasks, goals, habits, journals and other content you create | Until you delete them or delete your account |
| Account and profile records | Until you delete your account |
| Analytics data | 14 months |
| Encrypted backups | Rotated on a rolling schedule; residual copies age out within 90 days |
| Billing and tax records | As long as the law requires |
Your rights
Depending on where you live you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. California residents have these rights under the CCPA/CPRA and residents of the EU and UK under the GDPR. We do not sell personal information. Exercise any of these rights by emailing privacy@hardroad.app — we will not charge you or treat you differently for asking.
If you are an organisation using Hardroad and need contractual terms covering this, see our Data Processing Addendum and Subprocessors list.