Data Deletion
Last updated: April 6, 2026
Instavar offers two deletion paths so you can choose the one that matches what you actually want to remove. Use the first if you only want to disconnect a single linked social account. Use the second if you want to erase your entire Instavar account and all associated data.
Both paths are available to every user at no cost and are part of your rights under the EU and UK GDPR (Article 17, right to erasure) and Singapore's PDPA.
1. Disconnect a linked social account (scoped deletion)
Choose this option if you want to revoke Instavar's access to a single platform (for example, Facebook, Instagram, Threads, TikTok, LinkedIn, X, or YouTube) without losing your Instavar account, your generated videos, or your other connections.
What gets deleted
- The encrypted access and refresh tokens we hold for that platform
- The linked destinations stored under that connection (for example, your Facebook Pages, your Instagram business account, or your YouTube channel)
- The metadata associated with the connection (account label, handle, scopes, refresh history)
What is preserved
- Your Instavar user account, organisation, and other connections
- Videos and artifacts you created in Studio
- Records of posts that were already published, including their external URLs and analytics. We keep these because they document your publishing history and feed retention metrics. The published content itself lives on the external platform and is governed by that platform's own settings.
How to do it
- Sign in to Instavar Studio
- Go to Channels in the sidebar
- Find the connected account you want to remove and click Disconnect
- Confirm the action. Disconnection is immediate and the tokens are destroyed in the same database transaction.
Best-effort deletion of already-published posts
Where the platform exposes a deletion endpoint, Instavar will also attempt to delete posts we previously published on your behalf. LinkedIn, X, YouTube, Facebook, and Threads support this. Instagram and TikTok do not currently expose programmatic deletion, so you will need to remove those posts directly from the Instagram or TikTok app. RedNote and Lemon8 are not supported for publishing and have nothing to delete.
Disconnecting from Instavar does not, by itself, revoke Instavar's app authorisation on the platform side. You can also remove Instavar from your social account's app settings (for example, Facebook Settings -> Apps and Websites) for a defence in depth.
2. Delete your entire Instavar account (full erasure)
Choose this option if you want to exercise your right to erasure across all of the personal data Instavar holds about you.
How to request
Email privacy@instavar.com from the address associated with your Instavar account, with the subject line Account deletion request. We will acknowledge within seventy-two hours and verify the request through the same email address.
What happens after we receive your request
- Day 0. We log the data subject request, mark your account as pending deletion, and disable sign-in. You can cancel the request during the grace period by replying to the confirmation email.
- Days 1 to 30. Grace period. Your account is unreachable but the data is preserved so we can reverse the deletion if you change your mind or if a legal hold applies.
- Day 30. An automated workflow performs a cascading hard delete across our systems.
What gets deleted
- Your user record, profile, and authentication identity
- All organisations you solely own, including their projects, jobs, conversations, and review links
- All connected social accounts and their destinations (every provider, not just Meta)
- All generated artifacts in Cloudflare R2 (rendered videos, voiceovers, music, thumbnails, lip-sync outputs)
- Your consent records and onboarding metadata
- Internal logs that contain identifying user IDs
What we may retain (and why)
- Billing and tax records retained for the periods required by Singapore tax law and our auditors. These are stored in pseudonymised form where possible.
- Legal hold data if your account is the subject of an active legal claim, regulatory investigation, or law enforcement request. We will tell you that a hold applies (unless we are legally prohibited from doing so) and delete the data as soon as the hold lifts.
- Aggregated and anonymised analytics that no longer identify you.
- Posts already published to external platforms. We will best-effort delete them via the platforms' APIs as described above. Anything that cannot be deleted programmatically must be removed by you on the platform itself.
If you are part of a shared organisation
If you are not the only owner of an Instavar organisation, deletion will remove your user record and your individual contributions, but the organisation and its data will continue to exist for the remaining members. Tell us in your request if you want the entire organisation deleted as well, and we will route the request through the other owners.
Contact
For any questions about deletion or your other data subject rights, contact our Data Protection Officer at privacy@instavar.com or our general privacy address at privacy@instavar.com.
See also the Privacy Policy for the full list of data we collect and the legal bases on which we process it.