Data Deletion Instructions

01Controls available now

• Delete a draft or eligible post from the content library. A post already sent to a social platform may also need to be deleted on that platform.
• Delete an unused media item. Prepost removes its product record and queues the private stored object for deletion.
• Disconnect a social account from Connected accounts to stop new Prepost publishing through that connection.
• Revoke API keys from Integrations and log out to end the current browser session.
• Remove a workspace member or revoke a pending invitation if you are authorised to manage that workspace.

02Request full account deletion

Send an email from the address used for the Prepost account to privacy@prepost.social with the subject “Delete my Prepost account”. Include the account email, the names of affected workspaces, and whether you own a workspace that should be deleted or transferred.

Do not send a password, login code, session cookie, social token, API key, recovery code, or payment-card data. If you cannot use the registered address, explain why; additional proof of account control may be required.

03Identity and workspace verification

• We verify control of the registered email or an authenticated account before deleting data.
• A member can request deletion of their own identity, but cannot delete records that another workspace lawfully controls.
• A sole workspace owner may need to transfer ownership, remove members, or explicitly confirm deletion of the entire workspace and its content.
• A request may be paused if deletion would remove another user's workspace without authority or if the request appears fraudulent.

04What Prepost deletes

Deletion is designed to cancel future Prepost processing for the removed account. We may first disable access and publishing while the verified deletion is completed.

• Active sessions, login and verification challenges, Google sign-in identity, password hash, and account profile data, subject to shared-workspace and legal constraints.
• Owned workspace membership, invitations, account groups, queue settings, API keys, entitlements, and service preferences where the workspace is also deleted.
• Social identifiers, metadata, encrypted OAuth tokens, refresh tokens, connection status, and pending authorization state.
• Drafts, schedules, publishing jobs, captions, platform settings, provider result details, first-comment results, media records, thumbnails, and stored media objects controlled by the deleted workspace.
• Beta-list or first-party marketing records connected to the verified email when included in the request.

05Copies held by social platforms

Deleting data from Prepost does not automatically delete a post already published on a social platform or close that platform account. Delete published content directly on the destination platform where required and revoke Prepost in the platform's connected-app settings.

A platform may retain information under its own privacy notice, legal duties, or backup cycle. Contact that platform for a request concerning its copy.

06Timing and confirmation

After identity and workspace authority are verified, we normally complete a full request within 30 days. If applicable law allows more time because a request is complex or covers several workspaces, we will explain the extension.

We send confirmation to the verified contact when active-system deletion is complete. You may lose access before the final confirmation, and deletion cannot normally be undone.

07Limited data that may remain

• Protected backups until they expire through the normal recovery cycle; they are isolated from ordinary product use and are not restored except for disaster recovery.
• Minimal security, fraud, request, transaction, tax, or legal-claim records where retention is required or reasonably necessary under applicable law.
• Aggregated or irreversibly anonymised statistics that no longer identify a person.
• Data another workspace controls, unless that workspace owner also validly requests its deletion.

08Provider-review instructions

This page is Prepost's public user-data deletion instructions URL for provider reviews, including Meta applications. A provider callback or confirmation code will be implemented separately if a platform requires a machine-to-machine deletion callback rather than a public instructions page.

For Google data, users can also revoke Prepost access from Google Account permissions. Revocation prevents new access but does not replace a deletion request for data already stored in Prepost.