DATA DELETION INSTRUCTIONS

Overview

This page explains how to delete the personal data that SonarBloom holds about you. It covers three groups of people: Shopify merchants, brand users who signed in with Facebook/Instagram, and creators who connected their Instagram or TikTok account through a brand's invite form.

Important distinction. Revoking a connection (for example, uninstalling the Shopify app or removing SonarBloom from your Facebook "Apps and Websites" page) stops SonarBloom from collecting new data about you. It does not, on its own, immediately delete the data SonarBloom has already stored. The rest of this page explains what happens automatically, what you can request, and how long each step takes.

1. Shopify Merchants

1.1 Automatic deletion after you uninstall the app

When you uninstall SonarBloom from your Shopify admin, Shopify sends our servers three mandatory compliance webhooks:

• customers/data_request — a merchant-originated request for a customer's data
• customers/redact — a request to delete a specific customer's data
• shop/redact — sent 48 hours after uninstall, a request to delete all data for your shop

On receiving shop/redact, we delete all of your shop's data (products, orders, customers, tokens, mentions that were linked to that shop, creator records that were scoped to that shop, and associated backups) within 30 days. You do not need to take any further action.

1.2 Earlier or explicit deletion

If you want to request earlier deletion, or confirm that deletion has occurred, email [email protected] from the email address of the shop owner. We will confirm the request within 5 business days and complete deletion within 30 days of verification.

2. Brand Users Who Connected Facebook or Instagram

2.1 Disconnect in Facebook settings

To stop SonarBloom from accessing your Facebook/Instagram data going forward:

1. Sign in to Facebook
2. Open Settings & privacy → Settings
3. Open Apps and Websites
4. Find "SonarBloom" in the list and click Remove

2.2 Automatic deletion callback

When you remove SonarBloom from your Facebook account, Meta sends a signed data-deletion callback to our servers. We process the callback, delete the personal data associated with the Meta user ID that Meta sends us, and return a confirmation code and a status URL to Meta in accordance with Meta's Platform Terms. Deletion is completed within 90 days of the callback, and typically within 30 days.

You can check the status of a deletion request at any time by visiting the status URL that Meta provides you, or by emailing [email protected] with the confirmation code Meta returned.

2.3 Direct request

If you prefer not to go through Facebook, email [email protected] from the email address on your SonarBloom account. Include the Facebook page or Instagram username connected to your account. We will confirm the request within 5 business days and delete your data within 30 days of verification.

3. Creators Who Connected Instagram or TikTok Through a Brand's Invite

3.1 Revoke the connection at the source

Instagram:

1. Open the Instagram app or instagram.com
2. Go to Settings and privacy → Apps and websites
3. Find the SonarBloom-associated app and tap Remove

TikTok:

1. Open TikTok → Profile → Settings and privacy
2. Tap Security & permissions → Manage app permissions
3. Find the SonarBloom-associated app and tap Remove

3.2 Request deletion of already-collected data

Revoking a connection stops further collection but does not automatically delete what has already been captured. Email [email protected] with:

• Your Instagram or TikTok username
• The name of the brand that sent you the invite form (if you remember)
• A short statement that you want your data deleted

We will confirm receipt within 5 business days and delete your data within 30 days of verification. If the brand that invited you needs to keep certain records for legal or accounting reasons (for example, proof of a paid collaboration), we will minimize what is retained and anonymize what we can.

4. What We Delete

When a deletion request is completed, we remove:

• Your account, password hash, and profile information on SonarBloom
• OAuth access tokens and refresh tokens for Shopify, Meta, and TikTok
• All Shopify store data we ingested (for merchants)
• All Meta/Instagram and TikTok content we ingested (posts, stories, reels, videos, metrics, DM metadata)
• Creator profile records scoped to the affected account or brand
• Comments, notes, tags, and internal annotations about your content
• Your entries from our primary databases and search indexes
• Derivatives created for your tenant only (reports, exports scoped to you)

Backups containing your data are overwritten on our normal backup-rotation schedule, which completes within 90 days of the primary deletion.

5. What We May Keep

We may retain a limited subset of data after deletion where required by law or where a legitimate interest allows:

• Billing and tax records for up to 7 years (legal obligation)
• Audit and security logs for up to 90 days, in a form that does not identify you to other users
• Anonymized, aggregated statistics that cannot reasonably be re-identified
• Information we must retain to comply with a subpoena, court order, or other legal process

6. Timelines at a Glance

• Shopify shop uninstall: 48-hour grace window, then deletion within 30 days (total ≤ 32 days)
• Meta data-deletion callback: confirmation returned to Meta immediately; deletion completed within 90 days
• Direct email request: receipt confirmed within 5 business days; deletion within 30 days of verification
• Backup overwrite: within 90 days of primary deletion

7. Confirmation

For every deletion request, we return a written confirmation to you (by email) when deletion is complete. For Meta-originated requests, we also return a confirmation code and a status URL to Meta as required by Meta's Platform Terms; you can use that URL to verify deletion.

8. Questions