Export, correct, or delete your data
Export, correct, or delete your data
Your data rights are recognised under PIPEDA federally, Quebec Law 25, and the GDPR if you live in the EU or UK. my-id.ca implements them as buttons rather than as an email address you have to write to.
Everything below is on one page: Privacy controls, reachable from your account, or from the data requests page.
Download a copy of your data
Download My Data assembles your profile, persons, clients, checklists, documents, and voice recordings into a single JSON file and downloads it to your browser.
Fields that are encrypted in the database are decrypted into the export so you can read them. That makes the export genuinely useful — and makes it a sensitive file. Do not leave it in a shared Downloads folder.
Export in a machine-readable format
Export Data produces a structured copy in your choice of JSON, CSV, or XML.
Use this when you are moving data somewhere else, or want it in a spreadsheet. Use Download My Data when you want to read it.
Correct something
Most fields you can edit yourself — see Fix a wrong value in your profile. That is faster than any request and takes effect immediately.
For anything you cannot change from the interface, Request Data Correction on the privacy page submits it to the team.
Withdraw consent
Withdraw Consent is available on the same page, for processing you previously agreed to.
Delete your account
Request Account Deletion creates a deletion request in a pending state.
- While pending, you can cancel it yourself from the same page.
- Once the team approves it, deletion is scheduled 30 days out and then processed by a daily job.
- After approval, cancelling has to go through the privacy email address rather than the button.
The 30-day window exists so that an accidental or coerced deletion is recoverable. Backup snapshots are retained for 30 days before rotating out, so a deleted account is not instantly unrecoverable from backups either — which is normal, and worth knowing if your reason for deleting is urgent.
Timelines
- Self-service actions — immediate.
- Requests needing a person — answered within 30 days, with a possible extension of up to 30 additional days for unusually complex requests. You are told if that happens.
Every action is logged
Actions on the privacy page are recorded in an internal audit log, so there is a record that the request was made and honoured. That record protects you as much as it does my-id.ca.
Before you delete
- Export first. Deletion is designed to be thorough.
- Check what you would lose. Documents you signed, sharing history, and files live in the account.
- Consider just clearing sensitive fields. If the concern is one specific number rather than the account, delete the field.
Related
Frequently asked questions
- Does the export include my encrypted fields?
- Yes. Fields that are encrypted in the database are decrypted into the export so you can actually read them. Treat the downloaded file as sensitive.
- Can I cancel an account deletion?
- Yes, while it is still pending — from the same privacy page. Once the team approves it, cancelling has to go through the privacy email address.
- How long does a request take?
- Self-service actions are immediate. Requests that need a person are answered within 30 days, with a possible extension for unusually complex cases.