Data Deletion Instructions

This page explains exactly what Zootric stores when you connect a social account to us, how to stop us accessing that account, and how to have the data we hold about it deleted. It applies to Facebook Pages, Instagram professional accounts, Threads profiles, LinkedIn pages and YouTube channels connected to the Zootric platform.

You do not need a Zootric account to use this page. Anyone can email us at hello@zootric.com and request deletion.

1. What Zootric stores when you connect a social account

When you authorise Zootric to manage a social account, we store the following in our database:

• Access and refresh tokens. The credentials the platform issues so we can act on the account you connected. They are encrypted at rest with AES-256-GCM and are never shown in our dashboard, never sent to a browser, and never shared with anyone outside Zootric. We never see, ask for or store your Facebook, Instagram, Threads, LinkedIn or Google password.
• Account identifiers. The platform's own ID for the Page, profile or channel you connected — for example a Facebook Page ID, an Instagram professional account ID, or a Threads user ID — plus any related IDs the platform requires to publish (such as the Page a connected Instagram account is linked to).
• Public profile details. The display name or handle, the profile picture URL, and the public link to the profile or Page. These exist so you can confirm at a glance which account is connected.
• Granted permissions and status. The list of scopes you granted, when the token expires, when it was last refreshed, when we last published, and any error the platform returned.
• Published-post records. For each post we publish on your behalf: the content we published, the scheduled and actual publish time, the platform's post ID, the public permalink, and whether it succeeded or failed.

We use this data for one purpose only: publishing and reporting on the content you have approved, for the account you connected. We do not sell it, do not transfer it to advertisers or data brokers, and do not use it to train AI models.

2. Fastest route — revoke access from the platform itself

Revoking from Meta's own settings takes effect immediately and does not depend on us. It stops Zootric being able to access or publish to your account straight away. Do this first if you want access to stop right now, then follow step 3 to have the stored records deleted.

• Facebook: open Settings & Privacy → Settings → Business Integrations, find Zootric, and choose Remove.
• Instagram: in the Instagram app, go to Settings → Website Permissions / Apps and Websites, find Zootric, and remove it. Instagram professional accounts connected through a Facebook Page can also be revoked from the Facebook Business Integrations screen above.
• Threads: in the Threads app, go to Settings → Account → Website Permissions → Apps and Websites, find Zootric, and remove it.
• LinkedIn: Settings & Privacy → Data Privacy → Other applications → Permitted services.
• Google / YouTube: Google Account → Third-party apps & services.

Revoking on the platform side invalidates our token but does not by itself erase the records described in section 1. To have those deleted, send the request in section 3.

3. How to request deletion from Zootric

There are two routes. Either is sufficient.

1. Ask us to disconnect the account. If you are a Zootric client, tell your Zootric contact which account to disconnect. Disconnecting erases the stored access and refresh tokens immediately — the encrypted credentials are overwritten with nothing, and all scheduled publishing to that account stops at once.
2. Email a deletion request. Send an email to hello@zootric.com with the subject line Data deletion request, and include: the platform (Facebook, Instagram, Threads, LinkedIn or YouTube); the Page name, handle or profile URL of the account concerned; and the name of the business the account belongs to, so we can confirm you are entitled to make the request.

We will acknowledge your request by email so you have a written record of it, and email you again to confirm once the deletion is complete.

4. What gets deleted, and when

• Immediately on disconnect: the encrypted access token and refresh token are erased from our database, the connection is marked revoked, and every scheduled or queued post for that account stops. Where the platform provides an endpoint for it, we also tell the platform to invalidate the grant.
• Within 30 days of your request: the connection record itself — account ID, display name, profile picture URL, profile link, granted scopes, connection history and any platform-specific settings we stored — is deleted, along with the publishing records for that account (scheduled times, platform post IDs, permalinks, success and error logs) and the drafted content associated with it.

5. What we cannot delete

• Posts that are already live on your account. Once a post is published it lives on Facebook, Instagram, Threads, LinkedIn or YouTube and belongs to you, not to us. Deleting our records does not remove it, and once you have revoked our access we can no longer remove it for you. Delete it from the platform itself, or ask us to remove it before you disconnect.
• Data held by the platform, not by us. Anything Meta, LinkedIn or Google holds about your account is governed by their policies. For Meta, see Meta's Privacy Policy.
• Business and accounting records. Contracts, invoices and payment records relating to a paid engagement are kept for as long as tax and company law requires. These contain no social platform data, no tokens, and no content.
• Encrypted backups. Deleted rows may persist in routine encrypted database backups until those backups age out on their normal cycle. They are not accessible to our team in day-to-day use and are not restored except in a disaster-recovery event.

6. Contact

Questions about this page, about a request you have already sent, or about what we hold: email hello@zootric.com. See also our Privacy Policy and Terms & Conditions.