Data Deletion

1. How to request deletion

• Brands and Creators can open Profile → Delete Account, verify their password and save the request confirmation code. Google accounts without a password can set one or request verification through the privacy contact.
• If you cannot sign in, email hello@teamfluencer.id from the account address with subject “Data Deletion Request”. Never send a password.
• If you used Facebook/Meta Login, remove Teamfluencer under Apps and Websites. A verified callback will execute or queue the request and return a status code.
• For a connected Instagram or TikTok account, use Teamfluencer Profile settings to disconnect the account, or email hello@teamfluencer.id from the account address. We remove the stored connection tokens, scopes, profile snapshot, derived metrics, public-video metadata, Instagram messages, comments and publication records from active Teamfluencer systems; you may also revoke Teamfluencer in the platform's authorised-app settings.
• Disconnecting a social account does not itself delete your Teamfluencer account. Use Delete Account or the email procedure above when you want the Teamfluencer account and all eligible account data deleted.

2. Verification and active duties

We verify identity and account ownership. A request can remain pending while a campaign, assignment, payout, refund, chargeback, dispute, investigation, or other duty is unresolved. The account may be restricted during resolution where safe and lawful.

Pending requests remain recorded and are reviewed again. Optional marketing and analytics stop without waiting for campaign obligations. Delays are limited to necessary categories; shared/legacy files and transaction documents require ownership or retention review.

3. Data deleted or anonymised

• Profile, contact, credentials, provider tokens and scopes, preferences, and social identifiers not required for retention.
• TikTok profile, statistics and public-video metadata; Instagram professional profile, insights, messages, comments and publication records; and WhatsApp verification challenges and provider delivery content that are linked to the account and no longer required.
• Notifications, usage limits, templates, certain credits/balances, and operational records without a retention duty.
• AI events: remove account, campaign, session links, unstructured metadata and error messages containing personal information. Remaining linkable data is not called anonymous and follows limited retention.
• Campaign or payment relationships that must remain are connected to a non-login tombstone account.

4. Data that may be retained

• Transaction, invoice, payment, payout, refund, and bookkeeping documents for up to 10 years where they are tax records.
• Campaign, deliverable, licence, consent, audit, and communication records needed for contracts, claims, disputes, or third-party rights.
• Security or fraud logs during the applicable retention or investigation period.
• Non-content security and webhook-deduplication digests only where they cannot reasonably be linked back to the deleted provider payload or active account.
• Encrypted backups until the maximum 35-day cycle ends.

5. Timing and status

Verified requests receive a receipt and status code. Eligible non-retained data is targeted for completion within 30 days; blockers and review dates are recorded from receipt. Statutory cessation or restriction deadlines apply separately. A disabled account does not mean all copies or mandatory archives have been destroyed.

Pending means the request is recorded but cannot yet finish. Completed is used only after operational deletion/anonymisation is done or no matching account exists. A legally required delay will be explained where possible.

6. After deletion

The account cannot be restored, and the email may be used for a new account once processing allows. Retained records are not used for marketing or active-account operations. Contact privacy support with the confirmation code to challenge a status.