Data Deletion
Last updated: April 6, 2026
Instavar offers two deletion paths so you can choose the one that matches what you actually want to remove. Use the first if you only want to disconnect a single linked social account. Use the second if you want to erase your entire Instavar account and all associated data.
Both paths are available to every user at no cost and are part of your rights under the EU and UK GDPR (Article 17, right to erasure) and Singapore's PDPA.
1. Disconnect a linked social account (scoped deletion)
Choose this option if you want to revoke Instavar's access to a single platform (for example, Facebook, Instagram, Threads, TikTok, LinkedIn, X, or YouTube) without losing your Instavar account, your generated videos, or your other connections.
What gets deleted
- The encrypted access and refresh tokens we hold for that platform
- The linked destinations stored under that connection (for example, your Facebook Pages, your Instagram business account, or your YouTube channel)
- The metadata associated with the connection (account label, handle, scopes, refresh history)
What is preserved
- Your Instavar user account, organisation, and other connections
- Videos and artifacts you created in Studio
- Records of posts that were already published, including their external URLs and analytics. We keep these because they document your publishing history and feed retention metrics. The published content itself lives on the external platform and is governed by that platform's own settings.
How to do it
- Sign in to Instavar Studio
- Go to Channels in the sidebar
- Find the connected account you want to remove and click Disconnect
- Confirm the action. Disconnection is immediate and the tokens are destroyed in the same database transaction.
Already-published posts
Disconnecting a social account only revokes Instavar's future access. It does not delete posts that were already published. If you need published content removed, delete it on the platform directly or use the full account deletion path below, where Instavar attempts supported provider deletions before local publish records are purged.
Disconnecting from Instavar does not, by itself, revoke Instavar's app authorisation on the platform side. You can also remove Instavar from your social account's app settings (for example, Facebook Settings -> Apps and Websites) for a defence in depth.
2. Delete your entire Instavar account (full erasure)
Choose this option if you want to exercise your right to erasure across all of the personal data Instavar holds about you.
How to request
Email privacy@instavar.com from the address associated with your Instavar account, with the subject line Account deletion request. We will acknowledge within seventy-two hours and verify the request through the same email address.
What happens after we receive your request
- Day 0. We log the data subject request, mark your account as pending deletion, disable sign-in, revoke connected account tokens, and anonymise profile data that is no longer needed to operate the deletion workflow.
- Days 1 to 30. Deferred purge window. Operational records needed for audit, safety review, external post cleanup, or legal hold checks may remain until the hard-delete workflow runs.
- Day 30. An automated workflow performs a guarded hard delete across our systems. It fails closed if immutable audit records, shared workspace references, active safety cases, or legal holds still require retention.
What gets deleted
- Your user record, profile, and authentication identity
- All organisations you solely own, including their projects, jobs, conversations, and review links
- All connected social accounts and their destinations (every provider, not just Meta)
- All generated artifacts in Cloudflare R2 (rendered videos, voiceovers, music, thumbnails, lip-sync outputs)
- Internal operational records that can be safely removed without breaking audit, safety, billing, or shared workspace records
What we may retain (and why)
- Billing and tax records retained for the periods required by Singapore tax law and our auditors. These are stored in pseudonymised form where possible.
- Legal hold data if your account is the subject of an active legal claim, regulatory investigation, or law enforcement request. We will tell you that a hold applies (unless we are legally prohibited from doing so) and delete the data as soon as the hold lifts.
- Consent and data-rights history retained in anonymised form where needed to prove compliance with consent and deletion obligations.
- Aggregated and anonymised analytics that no longer identify you.
- Posts already published to external platforms. We will best-effort delete them via the platforms' APIs as described above. Anything that cannot be deleted programmatically must be removed by you on the platform itself.
If you are part of a shared organisation
If you are not the only owner of an Instavar organisation, deletion will remove your user record and your individual contributions, but the organisation and its data will continue to exist for the remaining members. Tell us in your request if you want the entire organisation deleted as well, and we will route the request through the other owners.
Contact
For any questions about deletion or your other data subject rights, contact our Data Protection Officer at privacy@instavar.com or our general privacy address at privacy@instavar.com.
See also the Privacy Policy for the full list of data we collect and the legal bases on which we process it.