If we ask that our data be removed, can it be done securely and be guaranteed to be inaccessible?

Yes.  We do not store any document data beyond temporary files, however, if requested we can remove all data from the Grackle Database such as email addresses of users and usage information.