Exir VPN · privacy request

Request account or data deletion

The core VPN can be used without an account. If you created an optional Exir ID account, or want identifiable support, connection, advertising or diagnostic records deleted, contact Ebadi GmbH using the instructions below. You can start a request from this page without reinstalling Exir VPN or signing into the app.

Start your request by email

Write to contact@exirvpn.com with the subject Exir VPN account or data deletion request.

Open a deletion request email

This opens your email application. Sending the email initiates a manual request; it does not automatically delete an account. If no email application is configured, copy the address and subject into your preferred email service.

Include only what helps locate your data

If you cannot find your ID or have lost access to the app, explain that in your email. We will discuss the minimum information needed to identify the records and verify ownership. Please do not reinstall solely to submit a request.

Do not email secrets

Do not include your recovery code, access token, password, VPN configuration, private key or unnecessary identity documents. We may need to verify that you own the account or are entitled to the data; we will explain appropriate verification steps when handling your request.

What happens after you contact us

  1. We review the request and contact you if information or ownership verification is needed.
  2. We identify the account and related records that can be linked to your request. Account identifiers, installation-linked diagnostics and support records are separate; we may need different identifiers to locate each category.
  3. After verification, we handle deletion of the account and its associated identifiable data, subject to applicable legal and security exceptions. We explain any relevant exceptions and respond within the period required by applicable law.

The account service stores account IDs, hashed recovery credentials, creation and update timestamps, and hashed sign-in session records. Deletion requests can also cover identifiable first-party support or diagnostic data that we can locate. Session expiry alone does not remove an account; current account and support records have no automatic expiry.

Some data may be retained where needed to comply with law, handle a dispute, prevent fraud or protect users and the service. Aggregated or no-longer-identifiable information may not be attributable to a particular account. We do not promise an automatic deletion deadline or a single retention period for all data categories.

Signing out, local data and Google services

Signing out is not account deletion. It removes your local sign-in state and requests revocation of the current session. Uninstalling Exir VPN or clearing its app data removes local credentials and approximate usage totals, but does not itself delete server-side records.

A request can also cover identifiable associated data processed on our behalf by service providers, where applicable. Additional identifiers may be needed to locate installation-linked records. Google advertising and Firebase data are processed separately from the Exir ID account; an account-deletion request does not automatically erase data processed independently by Google services. Records that cannot be linked to your account may require separate identifiers or the provider’s own privacy controls. See the service-provider information and advertising choices in our current policy.

Read the current Privacy Policy for the full data categories, retention explanation, privacy rights and contact details.