Your Data Protection Rights (GDPR & CCPA)

Last Updated: October 8, 2025

At Pep Group Organizer (hereafter, "PGO"), we respect your privacy and are committed to protecting your personal data. This page outlines your rights concerning your data under regulations like the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA). We do not limit the use of this capability to citizens of the EU or California alone, and we attempt to make this available to everyone on request.

We provide you with the ability to control your data, including the right to request the erasure of your personal information.

The Right to Erasure (Anonymization)

When you exercise your right to be forgotten, we honor your request by anonymizing your personal information within our systems.

Why Anonymization?

Our platform is built on community interaction and historical records of group activities. To maintain the integrity and history of groups, group buys, and communications for all users, we do not delete the content you have created (such as posts or messages). Instead, we permanently and irrevocably sever the link between that content and your identity.

How it Works:

Upon receiving and verifying your request, we will systematically replace all of your Personally Identifiable Information (PII) across our platform with placeholder, anonymized data. This includes:

Username: Replaced with a generic identifier (e.g., "FormerUser_12345").
Email Address: Replaced with a non-functional address (e.g., GDPR_Request_0001@NoEmail.com).
Phone Number: Replaced with a non-functional number (e.g., +15555555555).
Shipping & Profile Information: All other identifying information, including names and shipping addresses you may have provided for group buys, will be removed and replaced with generic placeholders.

This process is comprehensive and includes searching through historical versions of site data to remove your PII, ensuring your identity is scrubbed from our active and archived platform records.

IMPORTANT: Consequences of Requesting Anonymization

Please consider the following carefully before submitting a request. Once the process is complete, it is irreversible.

Loss of Access: Your account will be permanently inaccessible.
Organizers Lose Your Data: Group and Group Buy Organizers will no longer be able to see any of your information, including previously supplied shipping addresses or contact details, through our platform.
Action is Final: We cannot undo this process. If you have any ongoing activities or require information from your account, you must complete or save it before making a request.

We will require you to confirm your identity and your understanding of these consequences before we proceed.

Limitations of Data Removal

Our ability to remove your data is limited to the information stored on our platform and within our direct control. We cannot remove data that we do not have. This includes:

Data Exported by Organizers: If a Group Buy Organizer previously exported a list of participant addresses to a spreadsheet for shipping purposes, we have no way to access or delete that external file.
Information Shared Off-Platform: Any information you shared directly with other users or Organizers outside of our Service (e.g., via private email or messaging apps) cannot be removed by us.
Cached or Shared Analytics: If an Organizer previously generated a user report or analytics that included your username before your anonymization request, that historical, static report is outside the scope of our removal process.

Data in Backups

After the anonymization process is completed on our live systems, your original, identifiable data may persist in our system backups for up to 90 days. These backups are fully encrypted and securely stored. After this 90-day rotation period, the backups containing your old data will be cycled out and moved to encrypted cold storage or permanently deleted, fully removing them from our systems.

How to Make a Request

To request the anonymization of your personal data, please follow these steps:

Send an email to our privacy team at privacy@pyr0.dev.
Use the subject line: "Data Erasure Request".
In the body of the email, please include your username and the email address associated with your account on PGO.

We will then contact you to begin the identity verification process. This is a crucial security step to ensure we are processing a request from the legitimate account owner. This will begin by confirming the email address associated with the account is the email requesting the deletion. After this we will request information that may include (but isn't limited to) Groups joined, Group Buys Joined, or even previously committed to items within a Group Buy.

If you have any other questions about your data rights, please contact us at the same address.