Data Deletion

Last updated October 10, 2026

You can have your data deleted from SetToRun at any time, whether or not you still have an account. This page describes two situations: removing SetToRun’s access to your Instagram or Facebook account, and deleting your data from SetToRun entirely.

If you disconnect Instagram or Facebook through Meta

Removing provider access and deleting data stored in SetToRun are separate actions. Automatic handling of provider revocations is off by default and is not enabled for this release. Where enabled, a verified revocation for an eligible, matching connection can:

• Mark that connection as needing renewed access, so new provider requests using it are refused. Requests already sent cannot be recalled.
• Remove the stored access credential for that connection from Supabase Vault.

Older connections may lack the verified information needed for automatic matching. Revoking access does not delete your SetToRun account, contacts, conversation content, activity history or stored media. Automated data deletion is not available. To request deletion, use the email route below; reconnecting does not request deletion.

To delete your SetToRun account and data

1. Send an email to [email protected] from the email address on your SetToRun account, with the subject line “Delete my SetToRun data.” (Once account settings are available in the SetToRun dashboard, you will also be able to request deletion there directly — this page will be updated when that ships.)
2. We reply to confirm we received the request and to verify it is really you, usually within 2 business days.
3. Within 30 days of confirming your identity, we delete:
   • Your account and login credentials.
   • Your contacts, conversation history, saved replies, invoices and stock records.
   • Access tokens for every connected account, from Supabase Vault.
   • Uploaded files and media associated with your account, from storage.
4. Some records may be kept longer where we are required to by law (for example, financial records needed for tax purposes) or where needed to resolve a dispute or enforce our agreements. Where that applies, we keep only what is necessary and delete it once the legal reason to keep it ends.

What deletion means technically

Deletion removes your data from our live database, deletes associated files from storage, and deletes associated secrets from Supabase Vault — it is not a soft flag that hides your data while keeping it around. Encrypted backups are rotated out and fully overwritten within our standard backup retention window after deletion.

Questions

Email [email protected] with any question about this process, including if you are reviewing this page as part of Meta App Review. A provider deauthorization callback concerns access revocation; a data-deletion request concerns stored data. They are separate processes.