User Data Deletion

1. What we hold

When you connect a social platform to postme.live we receive and store only what we need to publish on your behalf and to display channel health to you:

• Your platform user / page / channel id, display name, and profile picture URL.
• An OAuth access token (and refresh token where the platform issues one) — encrypted at rest with AES-256-GCM.
• Aggregate stats (followers, subscribers, media count) and metadata for posts you publish through us.

We do not store your platform password. We do not read direct messages, comments, or private content.

2. Self-serve — the fastest path

Disconnect a single social account. From Settings → Connected accounts, click Disconnect next to the Facebook Page, Instagram account, YouTube channel, TikTok account, or custom webhook you want to remove. We immediately:

• Revoke the stored OAuth token where the platform supports server-side revocation.
• Delete the encrypted token and the connected-account row from our database.
• Cancel any pending or scheduled posts targeting that account.
• Remove any cached profile picture and stats for that account from object storage.

Delete uploaded media. From Media library, select a file and click Delete. The original and all generated thumbnails are removed from Cloudflare R2 within a few seconds; the database row is removed in the same transaction.

Delete a whole workspace (organisation). A workspace owner can delete an Outback Yak workspace from Settings → Organisation. Deleting a workspace removes every brand, media item, post, scheduled job, and connected account inside it. This action is not reversible.

Delete your entire postme.live account. From Settings → Account, click Delete account. This:

• Removes your identity from Clerk (our auth provider).
• Deletes every workspace where you are the sole owner.
• Removes you as a member from workspaces you share with others (the workspace itself keeps running for the remaining members).
• Disconnects and revokes every social account you had connected, as described above.

3. Revoke from the platform side as well

Even after you disconnect inside postme.live, you can independently revoke our access from each platform's own settings — useful if you want a belt-and-braces guarantee:

• Facebook / Instagram: facebook.com/settings → Business Integrations → find postme.live → Remove.
• YouTube / Google: myaccount.google.com/permissions → postme.live → Remove access.
• TikTok: TikTok app → Settings → Security and login → Manage connected apps → postme.live → Remove.

4. Request deletion by email

If you can't sign in, or you'd rather we run the deletion for you, email us at [email protected] from the address on your account, with the subject line “postme.live data deletion request”.

Please include:

• The email address on your postme.live account.
• Optionally, the name of the connected Facebook Page, Instagram account, YouTube channel, or TikTok handle if you want a partial deletion (only that account).

We will confirm receipt within 2 business days and complete deletion within 30 days, in line with our Privacy Policy. We'll send a confirmation when the deletion is complete, including a deletion confirmation code you can reference back to Meta if asked.

5. What is retained after deletion (and why)

Once deletion runs, postme.live keeps no copy of your platform tokens, media, posts, or brand profiles. Two narrow exceptions, both required by law or contract:

• Anonymous server logs. Standard request logs (IP, user agent, timestamp) are retained for up to 90 days for security and abuse-response purposes. They are not linked to your account after deletion.
• Financial records. If you were on a paid plan, invoices and payment records are retained for 7 years as required by Australian tax law. They contain only the legal name, billing address, and amount — no platform data.

Backups: our database is backed up daily with a 14-day retention window. Deleted rows age out of backups within 14 days of deletion.

6. Contact

Outback Yak — postme.live data protection
Email: [email protected]
Address: Outback Yak, Melbourne, Victoria, Australia · ABN 11 672 730 773

You can also lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe your data has been handled improperly.