Data deletion and provider access

1. Disconnect a mailbox in Attenva

1. Sign in to Attenva.
2. Open the user menu in the top-right corner and choose Mailboxes.
3. Find the mailbox and choose Disconnect.
4. Complete any required security confirmation.

Disconnect immediately stops future mailbox checks, disables or revokes locally stored provider credentials and triggers deletion of imported messages and referenced message objects for that mailbox from active Attenva storage. Minimal audit evidence may remain without message content.

If the mailbox is connected again later, Attenva performs a new initial import under the then-current limits. The current beta starts with up to the latest 30 days and the applicable provider message limit; it does not restore the deleted active copy.

2. Remove Attenva access in your Google Account

Attenva attempts to revoke Google access when you disconnect Gmail in the product. You can also independently review and remove Attenva from your Google Account at any time:

1. Open Google Account third-party connections.
2. Select Attenva under applications with access to your Google Account.
3. Review the connection, choose Remove access and confirm.

Removing Google access prevents further Gmail API access. Google notes that removing a third-party connection does not by itself erase data already shared with that third party, which is why Attenva also provides its own disconnect and deletion routes.

3. Remove Attenva access in your Microsoft account

Attenva uses delegated read-only Microsoft Graph access. You can revoke the Attenva application from your Microsoft account or ask your Microsoft 365 administrator to revoke the enterprise application consent. Revocation stops future Graph access; use Attenva's Disconnect action as well to trigger deletion of the imported active copy.

4. Request account or workspace deletion

Email kontakt@attenva.online from the email address associated with the Attenva account. Include the workspace name and state whether the request covers one mailbox, the account or the whole workspace. Do not send passwords, authenticator codes, recovery codes or mailbox content.

We may ask you to verify account and organisational authority. We respond without undue delay and in principle within one month. Where the right applies, active account and mailbox data is deleted or irreversibly anonymised, subject to limited legal obligations and claims.

5. Backups and claims

Residual copies may remain in protected disaster-recovery backups for no longer than 90 days, including where needed to investigate a claim or service-integrity incident. Backups are not used as a live mailbox archive. If a restore is necessary, completed deletion records must be reapplied before restored data is made available for normal service.

6. What may remain

We may retain minimal records that do not contain message content where necessary for security, proof of legal-document acceptance, handling the deletion request, compliance with law or the establishment, exercise or defence of legal claims. Such records are access-restricted and retained only for the applicable purpose.

7. Need help?

Contact kontakt@attenva.online. The current service is a controlled beta, so deletion requests are supervised by the Operator even where the product action has already removed mailbox content.