Your data: access, export, deletion

Last updated: August 9, 2026

This page explains how to exercise your rights under the GDPR against the SolidPing hosted service, and how to delete your data. It applies to the hosted service at SolidPing. If you run SolidPing yourself, we hold none of your data — see Self-hosting & GDPR.

Who to ask​

It depends on the relationship, and getting this right saves everyone time.

When a company uses SolidPing to monitor its systems, that company is the controller of the data inside its organisation, and we are its processor. We cannot act on a data subject request about that data without the company's instruction. If you write to us anyway, we will forward your request to them without undue delay and tell you we have done so — we will not simply ignore it.

Your rights​

Under Articles 15 to 22 GDPR you may:

• Access — obtain a copy of the personal data we hold about you, with information about how it is processed.
• Rectify — correct data that is inaccurate or incomplete.
• Erase — have your data deleted ("right to be forgotten"), subject to retention we are legally required to observe.
• Restrict — have processing limited while an issue is resolved.
• Object — object to processing based on our legitimate interests, including product analytics.
• Port — receive your data in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible.
• Withdraw consent — at any time, where processing rests on consent. This does not affect processing that already happened.
• Not be subject to automated decision-making producing legal or similarly significant effects. We do not carry out such decision-making.

Self-service: do it yourself, immediately​

Most of what you might request, you can do without waiting for us.

Deleting your data​

Delete an organisation​

An organisation owner can delete an organisation from the dashboard. On deletion, checks stop immediately, scheduled probe jobs are removed outright, memberships and org-scoped tokens are revoked, and status pages, badges, and embeds stop resolving. The records are then purged on the schedule in the Privacy Policy.

Delete your user account​

Email contact@solidping.io from the address on the account, with the subject "Account deletion". We delete the account and its personal data within 30 days, and confirm when it is done.

Two things to know first:

• If you are the sole owner of an organisation, delete or transfer the organisation first — otherwise it would be left without an owner.
• Data that other people in your organisation created, and shared incident history, is the organisation's data, not yours alone. Your identity is removed from it; the operational record itself stays with the organisation.

Remove the Slack or Discord app​

Uninstalling the SolidPing app from your Slack workspace (Apps → SolidPing → Remove) or your Discord server immediately revokes our bot token, so we can no longer post or read anything there. Remaining workspace data — the workspace ID, name, and stored settings — is deleted within 3 months of uninstall. To have it deleted sooner, email us.

Delete everything, now​

If you want the fastest complete removal: delete your organisations from the dashboard, remove any chat apps from your workspaces, then email contact@solidping.io asking for full erasure. We confirm within 30 days.

Backups are the one exception to "immediately". They expire on their own rolling schedule and are not selectively edited. Data in a backup is never restored into production after an erasure request — see DPA clause 12.

Making a request to us​

Email contact@solidping.io and include:

1. what you are asking for (access, export, correction, erasure, objection);
2. the email address or account the request concerns;
3. anything that narrows it down — an organisation slug, a date range.

Identity verification. We normally verify identity by requiring the request to come from the email address on the account. If it does not, or if the request concerns particularly sensitive data, we may ask for further proof — but only what is proportionate. We will not ask you for an identity document to confirm an email address we can verify another way.

Timing. We respond within one month of receiving the request. For complex or numerous requests we may extend by up to two further months, and we will tell you within the first month if we do, and why.

Cost. Free. We may charge a reasonable fee, or refuse, only where a request is manifestly unfounded or excessive — in particular, repetitive — and we will explain why if that ever happens.

If you are not satisfied​

Tell us first — most problems are a misunderstanding we can fix quickly. You also have the right, at any time, to lodge a complaint with a supervisory authority:

• France: CNIL — Commission Nationale de l'Informatique et des Libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
• Elsewhere in the EEA: the authority in your country of residence, place of work, or place of the alleged infringement.

You may also seek a judicial remedy under Article 79 GDPR.