DATA DELETION INSTRUCTIONS

Overview

This page explains how to delete the personal data that SonarBloom holds about you. It covers three groups of people: Shopify merchants, brand users who connected Facebook, Instagram, or TikTok, and creators who connected their Instagram account through a brand's invite form.

Important distinction. Revoking a connection (for example, uninstalling the Shopify app or removing SonarBloom from your Facebook "Apps and Websites" page) stops SonarBloom from collecting new data about you. It does not, on its own, immediately delete the data SonarBloom has already stored. The rest of this page explains what happens automatically, what you can request, and how long each step takes.

1. Shopify Merchants

1.1 Automatic deletion after you uninstall the app

When you uninstall SonarBloom from your Shopify admin, Shopify sends our servers three mandatory compliance webhooks:

• customers/data_request: a merchant-originated request for a customer's data
• customers/redact: a request to delete a specific customer's data
• shop/redact: sent 48 hours after uninstall, a request to delete all data for your shop

On receiving shop/redact, we delete, within 30 days, your shop's captured content (posts, Reels, videos, and Stories, with their media files), the usage rights records attached to that content, your Instagram, Facebook, and TikTok connections, and your Shopify access tokens. Your product catalog data is deleted when you uninstall. Backup copies are covered in Section 4.

We keep the shop record and its settings (such as your brand kit, categories, and alert rules), your team logins and billing records, the log of automatic DM replies sent (including the creator message that triggered each reply), the alerts sent, and the creator profiles built from your mentions, including invite form details and any Instagram access a creator granted. To delete those too, email us as described in 1.2.

1.2 Earlier or explicit deletion

If you want to request earlier deletion, or confirm that deletion has occurred, email [email protected] from the email address of the shop owner. We will confirm the request within 5 business days and complete deletion within 30 days of verification.

2. Brand Users Who Connected Facebook, Instagram, or TikTok

2.1 Disconnect in Facebook settings

To stop SonarBloom from accessing your Facebook/Instagram data going forward:

1. Sign in to Facebook
2. Open Settings & privacy → Settings
3. Open Apps and Websites
4. Find "SonarBloom" in the list and click Remove

Removing the app, or disconnecting an account inside SonarBloom, stops access going forward. It does not delete the data SonarBloom has already stored. To delete it, send a direct request (2.2).

2.2 Direct request

Email [email protected] from the email address on your SonarBloom account. Include the Facebook page, Instagram username, or TikTok username connected to your account. We will confirm the request within 5 business days and delete your data within 30 days of verification.

3. Creators Who Connected Instagram Through a Brand's Invite

3.1 Revoke the connection at the source

Instagram:

1. Open the Instagram app or instagram.com
2. Go to Settings and privacy → Apps and websites
3. Find the SonarBloom-associated app and tap Remove

TikTok: the invite form never connects your TikTok account. If you added your TikTok username to the form, there is nothing to revoke; ask us to delete it as described in 3.2.

3.2 Request deletion of already-collected data

Revoking a connection stops further collection but does not automatically delete what has already been captured. Email [email protected] with:

• Your Instagram username, and your TikTok username if you added it
• The name of the brand that sent you the invite form (if you remember)
• A short statement that you want your data deleted

We will confirm receipt within 5 business days and delete your data within 30 days of verification. If the brand that invited you needs to keep certain records for legal or accounting reasons (for example, proof of a paid collaboration), we will minimize what is retained and anonymize what we can.

4. What We Delete

When a deletion request is completed, we remove:

• Your account, password hash, and profile information on SonarBloom
• OAuth access tokens and refresh tokens for Shopify, Meta, and TikTok
• All Shopify store data we ingested (for merchants)
• All Meta/Instagram and TikTok content we ingested (posts, stories, reels, videos, metrics, DM metadata)
• Creator profile records scoped to the affected account or brand
• Comments, notes, tags, and internal annotations about your content
• Your entries from our primary databases and search indexes
• Data derived from your content for your account only, such as AI descriptions and estimated media values

Earlier stored versions of media files are permanently purged within 90 days of the deletion. Database backups containing your data are purged on our backup schedule.

5. What We May Keep

We may retain a limited subset of data after deletion where required by law or where a legitimate interest allows:

• Billing and tax records for up to 7 years (legal obligation)
• Audit and security logs, kept about 90 days, then deleted, and not shared with other users
• Anonymized, aggregated statistics that cannot reasonably be re-identified
• Information we must retain to comply with a subpoena, court order, or other legal process

6. Timelines at a Glance

• Shopify shop uninstall: 48-hour grace window, then captured content, rights records and connections deleted within 30 days (32 days at most)
• Disconnecting an account or removing the app in Facebook: stops new collection; nothing is deleted until you send a direct request
• Direct email request: receipt confirmed within 5 business days; deletion within 30 days of verification
• Earlier versions of media files: permanently purged within 90 days

7. Confirmation

For every deletion request, we return a written confirmation to you (by email) when deletion is complete.

8. Questions