Data Rights and Retention

Effective date: January 1, 2026

This page explains how individuals can exercise data rights and how long Accept Mission typically retains different categories of data. For broader context, see our Privacy Policy.

1) Who handles your request #

Accept Mission is an innovation management platform used by companies and innovation teams.

• Mission content (Customer Data): The organization or person that owns the Mission (the “Customer”) is the controller and decides how Mission content is used, shared, retained, and deleted.
• Accept Mission account, website, security, and billing data: Accept Mission is the controller for this operational data and can handle requests directly.

If your request relates to content inside a specific Mission (ideas, comments, attachments, votes, and similar), you may need to contact the Mission owner. If you contact Accept Mission, we will route the request when possible.

2) Your data rights #

Depending on your location and applicable law, you may be able to request:

• Access: confirmation of whether we process your personal data and a copy of it.
• Correction: fix inaccurate or incomplete data.
• Deletion: delete personal data where conditions apply. Some data may need to be kept for legal obligations or security reasons.
• Restriction: limit how data is processed in specific cases.
• Objection: object to certain processing, including direct marketing.

3) How to submit a request #

Email: [email protected]

To help us respond fast, include:

• The email address associated with your account (or the email you used on our website forms).
• The Mission name or workspace URL (if your request concerns Mission content).
• The specific right you want to exercise (access, correction, deletion, restriction, objection).
• What data you want us to focus on (account profile, support messages, billing, specific Mission content).

4) Identity verification and response timing #

To protect users, we may request verification before we provide or delete data.

We aim to respond within the timeframes required by applicable law. Under GDPR, organizations generally respond within one month for most requests (with limited exceptions).

5) Retention overview (typical periods) #

We keep personal data only as long as necessary for the purposes it was collected for, including legal, security, and operational needs.

Below is a readable overview of typical retention by category. Actual retention can vary based on Customer settings, contract terms, legal requirements, and what you do in the Services.

A) Mission content (Customer Data) #

Examples: ideas, comments, attachments, votes, evaluation inputs, activity history inside a Mission
Typical retention: retained based on the Customer’s instructions and configuration. The Customer can delete or export this content.

B) Account and profile data #

Examples: name, email, username, profile photo, role, account settings
Typical retention: kept while your account is active. If you delete your account, we delete or anonymize account data in line with our policies and legal requirements.

C) Support communications #

Examples: support tickets, chat transcripts, customer success communications
Typical retention: retained to handle requests and improve service quality, then deleted or anonymized when no longer needed.

D) Security and technical logs #

Examples: authentication logs, security events, diagnostic logs
Typical retention: retained for a limited period to protect the Services, investigate incidents, and prevent abuse, then deleted or anonymized.

E) Billing and financial records (paid plans) #

Examples: invoices, payment status, billing contacts
Typical retention: retained as required by applicable tax and accounting obligations.

F) Website analytics and cookie preferences #

Examples: website usage signals, cookie consent state
Typical retention: varies by cookie type and your preferences. For details and cookie controls, see Cookies and Cookie Preferences: https://www.acceptmission.com/resources/cookies-cookie-preferences/

Additional note on longer retention and account deletion #

In some cases, Accept Mission may retain certain conversations and personal data for up to 6 years, unless your account is deleted. When an account is deleted, Accept Mission states it disposes of data within 60 days, in line with its policies and terms.

6) Limits and exceptions #

Some requests may be limited where:

• A Customer is the controller for Mission content and must approve or execute the change.
• We must retain data to meet legal obligations, enforce agreements, or maintain security and auditability.

If we cannot fulfill a request, we will explain why and provide next steps where applicable.

7) Contact #

For data rights requests or retention questions: [email protected]