User Anonymization & Handling Data Deletion Requests

A data deletion request occurs when a user (affiliate user, advertiser user, or one of your employees) asks to have their personal information removed from your system. This typically happens due to privacy regulations and data protection laws.

Heads Up! These requests only affect personal information of individual users, not your business data. For example: Partner User will be anonymized, but you will still have Partner data.

What Stays Intact (Business Information)

Partner/Advertiser/Network accounts - Company names, billing information, physical addresses
Account status and permissions - Business account status remains unchanged
All reporting data and statistics - Performance metrics and analytics
Invoices and financial records - All business transaction history
Business audit trails - History of modifications to business entities (offers, campaigns, etc.)

What Gets Anonymized by User Type

Partner/Affiliate Platform Users

Profile Information:

First name, last name
Phone numbers (work and cell)
Instant message type and identifier
Language preference
Email address (changed to <unique-id>@invalid-anonymized.io)
Password (reset)
Account status (set to inactive)

Signup Information:

First name, last name, email, phone
User agent and IP address from registration
Responses to any custom fields defined by your network

Login Activity:

Browser user agent and IP addresses (only for this user)

Security Settings:

All multi-factor authentication (MFA) methods

Advertiser Platform Users

Profile Information:

First name, last name
Phone numbers (work and cell)
Instant message type and identifier
Language preference
Email address (changed to <unique-id>@invalid-anonymized.io)
Password (reset)
Account status (set to inactive)

Signup Information:

First name, last name, email, phone
User agent and IP address from registration
Responses to any custom fields defined by your network

Login Activity:

Browser user agent and IP addresses (only for this user)

Security Settings:

All multi-factor authentication (MFA) methods

Core Platform Users (Employees)

Profile Information:

First name, last name
Work phone, cell phone
Job title
Instant message ID and identifier
Profile picture (if any)
City, region, country
Email address (changed to <unique-id>@invalid-anonymized.io)
Password (reset)
Account status (set to inactive)

Login Activity:

IP addresses and user agent for all logins

Security Settings:

All multi-factor authentication (MFA) methods

Note Business audit records of modifications this employee made to Offers, Partners, and other business entities are preserved.

How to Anonymize a User

Navigate to the User

Go to the specific user's detail page:

For Partner/Affiliate users: Go to Partners → Manage -> Select your Affiliate / Partner → Users → Select the user

For Advertiser users: Go to Advertisers → Manage -> Select your Advertiser → Users → Select the user

For Core Platform users: Go to Control Center -> Accounts and choose the user in the Accounts tab

Anonymize User Data

Click the "Anonymize User Data" link in the Compliance section.

A confirmation popup will appear asking "Are you sure?"

Heads Up! This action cannot be undone. Click "OK" only if you're certain you want to proceed.

What Happens After Anonymization

Once you confirm, the system will immediately:

Replace personal identifiers with anonymous placeholders
Change the email to a format like abc123@invalid-anonymized.io
Reset the user's password (they won't be able to log in)
Set the account to inactive
Clear login history and tracking data
Remove any saved authentication methods

The user will no longer be able to access your system, but all business relationships and data remain unchanged.

Quick Reminder

This only affects individual users, not your business accounts

Reporting data stays intact - your performance metrics won't be affected

The action is permanent - you cannot restore the personal information once it's anonymized

Business operations continue normally - only the individual's personal access is removed

When to Use This Feature

Use the anonymization feature when:

A user explicitly requests data deletion
You're required by privacy regulations to remove personal data
You've confirmed the request is legitimate and authorized

What's Changed Last updated May 8, 2026 ▼

May 8, 2026 Added

Network-level data retention policy: customer account data is now retained for 6 months after account deactivation (aligned with the documented Data Retention Policy). The Customer Data Deletion Planned Date warning displays from the moment of archive so the full retention window is transparent.

Network-Level Data Retention

User anonymization (above) handles individual people requesting their personal data be removed. Network-level retention is different — it covers what happens to the entire customer account when the relationship with Everflow ends.

The 6-month policy

When a customer account is deactivated, Everflow retains the account's data for 6 months after the deactivation date and then deletes it automatically. This 6-month window matches Everflow's documented Data Retention Policy.

The Customer Data Deletion Planned Date warning

From the moment a customer account is archived, the platform displays a Customer Data Deletion Planned Date on the account, calculated as time_deactivated + 6 months. The warning is visible immediately on archive (not 6 months later) so the full window is transparent to anyone working with the account.

Once the planned date passes, deletion is permanentAfter the planned date, customer account data is deleted automatically and cannot be recovered. If the customer wants to come back, they'll need to set up a fresh account from scratch. Plan any export or archive needs before the 6-month mark.

What gets deleted at the network level

When the planned date is reached, the platform removes:

The customer's account record and configuration.

All partner, advertiser, and offer data attached to that account.

Reporting and conversion data tied to the account.

User profiles and authentication credentials.

If the customer reactivates before the planned date

Re-activating an archived account before the planned date stops the deletion clock. The account, its data, and the Customer Data Deletion Planned Date warning all return to active state.