Legal

Data Deletion

Hygio — AI-Powered Facility Hygiene Management Platform

Last updated: June 02, 2025

This page explains data held by Hygio, how to request deletion, and how our dual role as data controller and data processor affects deletion processes.

1. Important: Controller and Processor Distinction

Hygio holds two types of data with different deletion processes.

Data we control (platform accounts and our own operations): We can delete this directly on request from authorized individuals.

Data we process on behalf of customer organizations (cleaning photos, task records, staff performance data): For this data, the customer organization is the data controller. Deletion requests for this data should go to the customer organization, which instructs us accordingly. We comply with documented deletion instructions from customer organizations.

2. What Data Hygio Holds

Data	Controller	Where	Deleted When
Admin and staff account credentials	ICI Tech	Our servers	Account termination
Staff task completion records	Customer organization	Our servers	Per customer instruction or contract end
Cleaning photos (before/after)	Customer organization	Our servers	Per customer instruction or contract end
AI analysis results	Customer organization	Our servers	Per customer instruction or contract end
Management dashboard reports	Customer organization	Our servers	Per customer instruction or contract end
End-user feedback data	Customer organization	Our servers	Per customer instruction or contract end
Contract and communications data	ICI Tech	Our servers	3 years from last contact
Technical and security logs	ICI Tech	Our servers	12 months (rolling, automatic)
Financial and billing records	ICI Tech	Our servers	10 years (commercial law)

3. How to Request Account Deletion (Admin or Staff Users)

If you are a platform user and want your account and personal data deleted, contact your organization's Hygio administrator first. The organization manages user accounts and can remove individual accounts via the management dashboard.

To request direct deletion, email app@icitech.com.tr with subject "Data Deletion Request — Hygio" from the email address associated with your account. We respond within 2 business days and complete within 30 days.

4. How Customer Organizations Request Content Deletion

Customer organizations (as data controllers) can instruct us to delete specific Content by contacting app@icitech.com.tr with subject "Content Deletion Instruction — Hygio" and specifying the data scope and timeframe. We execute documented deletion instructions within 30 days. On contract termination, Content is deleted per the terms agreed in the service agreement.

5. Staff Data Subject Requests

If you are a field staff member or manager of a Hygio customer organization and want to exercise rights over your task or performance data, contact your employer first. Your employer is the data controller for your task and performance records. If your employer cannot assist, contact us at app@icitech.com.tr and we will route your request appropriately.

6. Photographs

Cleaning photos are stored under the customer organization's account. The organization controls retention and can instruct deletion at any time. On contract termination, photos are deleted per the service agreement. Staff should ensure photos do not contain images of individuals — if a photo does capture a person, notify your organization's administrator immediately.

7. Data We Are Required to Retain

Data	Period	Legal Basis
Financial and billing records	10 years	Turkish Commercial Code
Contract correspondence (if legally relevant)	Up to 3 years	Turkish Code of Obligations
Data subject to active legal hold	Duration of proceedings	Turkish civil procedure

8. After Account Termination

When a customer organization's service agreement ends, we follow the contractual data export and deletion timeline. Account credentials and platform access are revoked immediately on termination. Content deletion is completed within the period specified in the service agreement. We issue a deletion confirmation to the customer organization on request.

9. Your Additional Privacy Rights

Access, correct, restrict, or receive a portable copy of your personal data — contact app@icitech.com.tr. For staff data: contact your employer first. EEA and UK users may lodge complaints with local DPAs — see https://hygio.app/privacy/gdpr. Turkish users: https://www.kvkk.gov.tr/. We respond within 30 days, free of charge.

10. Need Help?

Email: app@icitech.com.tr Subject: "Data Deletion Request — Hygio" Website: https://hygio.app/

We acknowledge requests within 2 business days and complete within 30 days.