Privacy: Deletion of Account, Opting-Out

[drniiken]

Description

In the context of User Privacy (#1030), it has been discussed and decided that users can 1. opt out from collecting data and 2. entirely "leave the platform" and have their account (and everything which is related to it) deleted.

Account Deletion involves:

• Give the option to delete everything from oSPARC / sim4life
• Deletion happens within 48 hours of request, with final confirmation via email
• User entry in database, all associated projects, data, and logs
• Warn about persistence of data in backups for up to N months

In addition, we shall be transparent to the user with respect to data and user privacy in general, and communicate to the user that:

• We encrypt data
• We do not sell or communicate data to third parties
• We store anonymized data necessary to provide you with the service (debug logs, resource usage, …)
• We might store aggregated data for statistics (possibility to opt-out) [we might leave this away]
• Payment info is handled solely by our payment service provider, we do not store any of it (credit card details, etc.)
• Project data is stored on AWS servers in the USA

We might also need a "contact point", e.g.:
"For any concerns about privacy, you can contact [email protected]”

Tasks

Preview Give feedback

1. Create write-up: Tech stack, treatment of user data, user privacy osparc-simcore#4620
   t:enhancement +1
   
2. Create Document for User Privacy Conditions #1037
   documentation wontfix +2
   
3. Users can be deleted, their data is deleted osparc-simcore#4619
   2 of 2
   t:enhancement +1
   
4. Create mail [email protected] osparc-ops-environments#315
   3 of 3
   p:high-prio t:enhancement +2
   
5. Backlog on GDPR (General data protection Regulation) osparc-simcore#4087
   idea t:enhancement +2
   

Kobayahsi Maru

Preview Give feedback

1. user can opt out of being monitored in the preferences and dynamic sidecar no longer exposes metrics #1203
   +0
   

[mrnicegyu11]

It looks to me that this is done, the "marketing page" aspect of privacy I have transfered to Anastasia for now. Please contact me or re-open if there is more on the team to be done :--) Cheers