Account and Data Deletion Policy
This Account Deletion Policy (“Policy”) defines the procedure for account termination and personal data deletion on the “Rivrox” platform (“Platform”) in accordance with Federal Law No. 152-FZ (Russia) and Article 17 of the General Data Protection Regulation (EU) 2016/679 (GDPR).
1. Right to Erasure (“Right to be Forgotten”)
Every user has the right to request deletion of their account and associated data at any time if:
- data are no longer necessary for the purpose of processing;
- the user withdraws consent to processing;
- processing was unlawful;
- erasure is required to comply with a legal obligation (Art. 17 GDPR, Art. 21 FZ-152).
2. How to Delete an Account
Accounts may be deleted:
- via the profile settings (“Delete Account” option);
- by sending a request to info@rivrox.com from the registered email address;
- by the Administration in case of Terms of Use violations.
3. Data Subject to Deletion
Deleted data includes:
- account credentials (email, name, user ID);
- avatars, covers, backgrounds;
- playlists, comments, likes, reposts;
- listening and message history;
- personal preferences and session tokens.
4. Data Retained for Legal or Technical Reasons
Certain data may be retained temporarily in anonymized form:
- security logs (IP, actions) — up to 12 months;
- database backups — up to 90 days;
- billing records and invoices — up to 5 years (tax and accounting law);
- data required to resolve disputes or comply with legal obligations.
5. Identity Verification
To prevent unauthorized deletions, the Platform may request identity verification (email code or password). For email requests, the Administration may require confirmation of ownership before processing.
6. Deletion by Administration
The Administration may delete an account:
- for violations of the Terms of Use or Content Policy;
- for fraudulent or spam activity;
- upon lawful requests by competent authorities.
7. Minors’ Data Deletion
If it is discovered that an account belongs to a user under 18 years old without parental consent (Art. 8 GDPR), it may be deleted after notice to guardians. Parents may request deletion via info@rivrox.com
8. Effects of Deletion
Once deleted:
- login and recovery become impossible;
- all content and activity are permanently removed;
- pending creator payments are reviewed and may be canceled;
- backups are destroyed within the retention period.
9. Policy Updates
This Policy may be amended without prior notice. The latest version is published at /account-deletion-policy.
10. Contact
For deletion or privacy inquiries: info@rivrox.com
Last updated: 5 November 2025