Last Updated: December 3, 2025
Effective Date: January 1, 2026

This Data Deletion Policy explains how PFORM handles deletion of personal data and user-generated content collected through https://pform.live and related services, including AI-powered music/beat generation, video concepting, and social content workflows. It should be read together with our Privacy Policy and Terms of Service.​

1. Scope and objectives

This policy applies to:

• Personal data of users, customers, and collaborators stored or processed by PFORM.

• User-generated content (projects, uploads, prompts, AI outputs) associated with a PFORM account.

• Logs, backups, and data held by our processors/service providers to the extent technically and legally feasible.​

Objectives:

• Honor user deletion rights under the Tennessee Information Protection Act (TIPA) and other applicable laws.​

• Minimize retention of data to only what is necessary for legitimate business, security, and legal purposes.​

• Dispose of data securely in line with FTC data security and disposal guidance.​

2. User deletion rights

2.1 Right to request deletion

Subject to the exceptions below, users may request deletion of personal data that PFORM has collected about them, including:​

• Account profile information.

• Contact information and communication history.

• Project-level content and associated metadata (e.g., beats, stems, prompts, video concepts, social content drafts tied to your account).

TIPA gives Tennessee residents the right to require a controller to delete personal information the controller has obtained about them, except for aggregated or de-identified data that cannot reasonably be linked back to an individual.​

2.2 How to submit a deletion request

To submit a deletion request, email: legal@pform.live with the subject line:
“Privacy Request – Data Deletion”

Please include:

• Full name.

• Email address tied to your PFORM account.

• A clear statement that you are requesting deletion of your personal data and, if relevant, project content.

PFORM may request reasonable additional information to verify your identity and secure the account before acting on a deletion request.​

2.3 Response timelines and appeals

• PFORM aims to respond to deletion requests within 30 days, with the ability to extend once where legally permitted for complex requests (up to a maximum of 60 days under TIPA-style expectations).​

• If your request is denied in whole or in part (for example, due to legal retention requirements), you will receive an explanation and information on how to appeal that decision where applicable.​

3. Exceptions and legal retention requirements

Even when a deletion request is granted, PFORM may retain certain data where necessary to:​

• Comply with legal, tax, accounting, or regulatory obligations (e.g., transaction records, invoices, audit logs).

• Detect, investigate, or prevent fraud, abuse, security incidents, or violations of our Terms.

• Exercise or defend legal claims or cooperate with law enforcement requests.

• Maintain aggregated or de-identified data that cannot reasonably be used to identify an individual.​

For children’s data covered by COPPA, operators must only retain children’s personal information as long as is reasonably necessary for the purpose collected and must delete it upon parental request or when no longer needed.​

4. What is deleted (and when)

4.1 Account-level data

Upon approved deletion:

• Account profile information (name, contact details, preferences) is removed or irreversibly anonymized from active systems.

• Authentication data (hashed credentials, access tokens) is deleted or disabled so the account can no longer be accessed.

• Marketing preferences are updated to prevent future promotional emails, while maintaining minimal suppression records to honor opt-outs.​

4.2 Project and content data

For AI music, video concepts, and social content workflows associated with the deleted account:

• Project data (e.g., sessions, prompts, drafts, beats, stems, rendered audio, text scripts, captions, content calendars) will be deleted or anonymized from active production systems to the extent they can reasonably be tied to your identity.

• Where feasible, any direct identifiers linking AI Outputs to you are removed from active systems.​

This does not affect:

• Aggregated statistical or analytical data that no longer identifies you (for example, model-level usage statistics or generic training metrics).​

• AI model parameters that have been updated through generalized learning; models are not “rolled back,” but new inferences will no longer be linked to your account or profile.

4.3 Logs, backups, and archives

• Operational logs and security logs containing your identifiers will be retained only as long as necessary for security, debugging, and fraud detection purposes, then deleted or anonymized on a rolling schedule.​

• Backups are maintained for business continuity and disaster recovery; your data may persist in encrypted backup media until those media recycle through scheduled backup retention windows, after which data is overwritten or destroyed using industry-standard methods.​

5. Processor and third-party deletion

Where PFORM uses third-party processors (e.g., hosting, analytics, payment processors, email providers):

• Contracts require processors to delete or return personal data at the controller’s direction at the end of service or upon verified deletion requests, unless retention is required by law.​

• PFORM will notify relevant processors when a deletion request is granted and request deletion or anonymization of matching personal data from their systems, subject to their technical and legal constraints.​

For data shared with independent controllers (e.g., payment providers acting on their own behalf), users may need to contact those entities directly to exercise their deletion rights under their respective policies.

6. Children’s data and special protections

For users under 13 or content directed to children:

• Personal data is collected only with verifiable parental consent, and retention is limited to what is reasonably necessary to provide the requested service.​

• Parents or legal guardians may request deletion of their child’s data at any time via legal@pform.live, subject to reasonable identity verification and legal retention obligations.​

• PFORM’s retention schedule specifically flags children’s data for shorter retention and higher scrutiny, in line with updated COPPA obligations.​

7. Internal process and security

PFORM maintains an internal workflow for handling deletion requests that includes:​

• Identity verification and request categorization (access, correction, deletion, portability).

• Scoping of systems and data types affected (production databases, logs, caches, and, if feasible, backups).

• Execution steps for deletion or anonymization in primary systems.

• Notification and coordination with third-party processors where required.

• Documentation of actions taken and retention of minimal records needed to demonstrate compliance to regulators or auditors.​

All deletion actions are carried out using secure methods consistent with FTC data disposal guidance, including secure deletion of digital media and appropriate destruction of any physical records that may contain personal information.​

8. Changes to this policy

PFORM may update this Data Deletion Policy to reflect changes in laws (such as TIPA or COPPA amendments), regulatory guidance, or internal practices. Any material changes will be communicated via the Website or email, with an updated “Last Updated” date at the top of this page.​

9. Contact

For questions about this Data Deletion Policy, or to submit a deletion request:

PFORM Legal Department
Email: legal@pform.live
Location: Memphis, Tennessee (Shelby County)​