Data Deletion Instructions

What gets deleted

When your account is deleted, we permanently remove:

• Your PostPilot account and login credentials, including your name, email address, and phone number if you provided one.
• The access tokens for any connected Facebook Page and linked Instagram Business account.
• The connection records for those accounts, including Page name and Page ID.
• Your Brand Profile, including business description, tone settings, topics, and posting schedule.
• All posts created in PostPilot — drafts, scheduled posts, and the records of posts already published.
• All AI-generated content: captions, hooks, hashtags, and generated images stored by PostPilot.

Deletion is permanent and cannot be undone. Posts that were already published to Facebook or Instagram remain on those platforms — they belong to your Page, not to PostPilot. To remove them, delete them from Facebook or Instagram directly.

1. 1Send an email to support@runpostpilot.com from the email address registered on your PostPilot account. We use the sending address to verify the request, so a request sent from a different address cannot be processed.
2. 2Use the exact subject line Data Deletion Request.
3. 3We will delete your account and all associated data within 30 days of receiving the request, and email you a confirmation once it is done.

• In PostPilot: sign in and go to Dashboard → Connected Accounts, then click Disconnect. This deletes the stored access token immediately, and PostPilot can no longer read from or publish to your Page or Instagram account.
• In Facebook: open Settings & Privacy → Settings → Apps and Websites, find PostPilot, and remove it. Facebook notifies us automatically and we record the request. Facebook will show you a confirmation code — you can check the status of that request by adding ?id=YOUR-CODE to this page's URL.

Disconnecting removes our access to your social accounts, but it does not delete your PostPilot account. To delete everything, follow the email instructions above.

Data we may retain

After deletion we keep only a minimal record of the deletion request itself — the request identifier, its status, and the date — so that we can demonstrate the request was handled. This record contains no post content, no access tokens, and no social account data. We may also retain records where we are required to by law, for as long as the law requires.