Data Deletion

When you connect a marketing tool (Meta / Facebook, Instagram, HubSpot, Google) to LoomDeck, we store the following on our EU-hosted infrastructure (Hetzner EU, Supabase Frankfurt):

• OAuth access and refresh tokens (encrypted at rest with AES-256-GCM)
• The provider account ID we connected (e.g. Meta ad account ID, GA4 property ID, HubSpot hub ID)
• The scopes you granted and the time the connection was made
• The email address and workspace name you signed up with

We do not store your Facebook password, phone number, friend list, private messages, or content from any page or ad account outside the scopes you explicitly granted.

You can trigger deletion in two ways, in order of speed:

• In-app: log in at loomdeck.io/login, go to Integrations, click Disconnect on the provider you want removed. This deletes the stored token for that provider immediately.
• Email (full workspace deletion): send a deletion request from the email address on your workspace to [email protected]with the subject line “Data Deletion Request”. Include the workspace email and, if applicable, the provider(s) you want disconnected. This removes your workspace record, all connected integration tokens, and all cached data.

In-app disconnection is immediate. Email requests are actioned within 7 calendar days of receipt. Backups are rotated on a 30-day schedule; deleted data is removed from backups within 30 days.

Facebook / Instagram (Meta):deleting your LoomDeck workspace or disconnecting Meta inside LoomDeck removes the token we hold. It does not delete anything on Meta’s side. To also revoke LoomDeck from your Facebook account, go to Facebook Settings → Business Integrations and remove LoomDeck.

Google (GA4): revoke LoomDeck from your Google account at myaccount.google.com/permissions.

HubSpot: uninstall the LoomDeck app from your HubSpot account under Settings → Integrations → Connected Apps.

After deletion, we send a confirmation email to the address on the workspace within 7 days. If you did not receive confirmation, reply to your original request or email [email protected] and we will respond within one business day.

NexBDM (Pty) Ltd, Reg No 2026/250171/07, 37 Montery Place, 140 Griffiths Road, Pretoria 0184, South Africa. Data controller: Heinoux J. Roux, Director, [email protected].