Data Deletion

1. Controller and processor distinction

This page explains data held in connection with panic.app, how to request deletion, and how our dual role affects deletion.

Data we control (marketing enquiries, and typically admin account credentials and our operational logs): we can delete this directly on authorized request.

Data we process on behalf of customer organizations (workplace safety, incident, and employee status data): the customer organization is the data controller. Deletion requests for this data should go to the customer organization first; we execute documented deletion instructions from customers.

2. What data we hold

• Marketing and sales enquiries — controller: ICI Tech — deleted per retention (typically up to 3 years after last contact) or on valid request.
• Admin account credentials — controller: ICI Tech — deleted on account termination.
• Workplace safety / incident / employee status data — controller: customer organization — deleted per customer instruction or contract end.
• Support communications — controller: ICI Tech — typically 3 years from last contact.
• Technical and security logs — controller: ICI Tech — typically 12 months (rolling).
• Billing and contract records — controller: ICI Tech — up to 10 years where required by commercial law.

3. Marketing-site and enquiry deletion

To request deletion of enquiry or marketing-site personal data we control, email app@icitech.com.tr with subject "Data Deletion Request — panic.app". We acknowledge within 2 business days and complete within 30 days where legally required, subject to retention exceptions below.

4. Admin account deletion

If you are a platform administrator, contact your organization's panic.app administrator first. The organization manages user accounts.

To request direct deletion of an admin account we control, email app@icitech.com.tr from the address associated with the account with subject "Account Deletion Request — panic.app". Export any data you need before deletion. Server-side deletion is completed within 30 days of confirmation, except legally required retention items.

5. Customer organization content deletion

Customer organizations (as controllers) may instruct us to delete specific workplace content by emailing app@icitech.com.tr with subject "Content Deletion Instruction — panic.app" and specifying scope. We execute documented instructions within 30 days. On contract termination, content is deleted per the service agreement.

6. Employee requests

If you are an employee whose safety status or incident data is processed in panic.app, contact your employer first. Your employer is the data controller for that data. If your employer cannot assist, contact app@icitech.com.tr and we will route your request appropriately.

7. Data we may be required to retain

• Financial and billing records — up to 10 years (Turkish Commercial Code / applicable financial law).
• Contract correspondence relevant to legal claims — up to periods required under applicable law.
• Data subject to active legal hold — duration of proceedings.

8. Additional rights

Access, correction, restriction, or portability requests: app@icitech.com.tr. EEA/UK users: https://panic.app/privacy/gdpr. Turkish users: https://www.kvkk.gov.tr/. We respond within 30 days, free of charge where required by law.

9. Contact

Email: app@icitech.com.tr

Subject: "Data Deletion Request — panic.app"

Website: https://panic.app