Data Deletion

Comment Operator gives you two ways to request deletion of your data: in-product (recommended) or via Meta's data-deletion callback. Both result in soft deletion immediately and permanent deletion within 30 days.

In-product deletion (recommended)

Sign in, go to Settings, and click "Delete account" in the danger zone. You will be signed out and your data will be marked for deletion. If you change your mind within 30 days, sign in again and click "Restore account" on the homepage to recover everything.

Meta data-deletion callback

If you remove the Comment Operator app from your Instagram or Facebook account, Meta sends us a data-deletion request automatically. We honor it within 30 days. Our callback URL is:

• POST /api/data-deletion

On receipt of a valid signed request from Meta, we soft-delete the affected user's data and return a confirmation_code + status URL per Meta's spec. The status URL lets you check progress at any time during the 30-day window.

What gets deleted

• Your user record and associated profile data.
• All connected Instagram account records, including encrypted OAuth tokens (already encrypted at rest, deleted at the row level).
• All comments ingested for your accounts.
• All classifications, decisions, generated drafts, and execution records.
• All voice examples (comment + reply pairs) you added or that we ingested from your account.
• Audit log entries referencing your account.

What is retained briefly

For the 30-day grace window, the data is soft-deleted (marked deleted but not yet purged) so you can restore your account if you change your mind. After 30 days, a scheduled job permanently deletes the rows from our database.

What is not retained

Once permanent deletion completes, we retain only minimum records required by law: aggregate billing summaries (no personal data), and security/audit logs in a form that cannot be linked to you (your user_id is hashed before retention).

Third parties

We do not control retention at third-party services we use to operate the platform. Specifically:

• Anthropic and OpenAI — by contract, comment text and embeddings sent via API are not retained or used to train models. Their retention policies apply.
• Meta — Instagram data is also subject to Meta's policies; see Instagram's data deletion process.
• Clerk — your Clerk account is separate from Comment Operator and must be deleted in Clerk to fully remove your sign-in identity.

Contact

Email jmdarish@gmail.com with any deletion question or concern.