Customer data export and deletion policy
Getting your data out
While subscribed, and for 30 days after the subscription ends, an administrator can ask for a full export by emailing support@obmr.app from the account contact's address. We will confirm the request with the account contact and deliver the export within 30 days, usually much sooner.
The export contains every record your organization holds in OBMr, in CSV files with a JSON copy: people, structure, supervision, personnel records, pinpoints, observations, phases, interventions, diagnostics, feedback, and your activity log. We deliver it securely, by a method agreed with the account contact.
A self-service export button is planned. Until then, exports are prepared by our team.
Deleting a person
Administrators and HR can end a person's employment record and assignments in the app, and administrators can end their access. Their past records stay with the organization as part of its history, as employment record-keeping laws usually require. To have a person's information removed entirely, the organization can ask us at privacy@obmr.app.
Deleting your organization
We erase an organization's data:
- within 90 days after its subscription ends, or
- sooner, when the account contact asks in writing.
Erasure removes, in one step: all people, personnel records, structure, supervision, performance records, scorecards, credentials and continuing education, competency sign-offs, recognition and the points ledger, rewards, weekly check-ins, policy acknowledgements, poll counts, birthdays people chose to share, fidelity checks, identity cards, supervision feedback and upward ratings, invitations and memberships, and any user account that belongs to no other organization. The organization's name is replaced with "Erased organization". Its activity log keeps only the bare facts of each entry, such as the time and the kind of action, with the details removed, until those entries reach the end of the 2-year activity log retention period and are deleted.
Copies in database backups expire on the backup provider's schedule, backup retention period, and are not restored except to recover from a disaster. If a restore happens, we erase again any organization that had been erased.
We confirm in writing when erasure is complete, and record the organization's identifier and the erasure date in a register kept outside the database.
Legal holds
If we receive a court order, a preservation demand, or notice of a legal claim that requires keeping information, we pause deletion of the affected information only, tell the customer unless the law prevents us, and resume deletion when the hold ends.