Data Deletion

Last updated: May 19, 2026

The Sojourner7 Creator Dashboard stores OAuth-derived data only for users who explicitly authenticate their own social accounts. This page describes how to request deletion of any data associated with the Application — including data created during a platform app-review process.

Quick path: Email [email protected] with subject "Data Deletion Request" and your platform identifier (Meta user ID, TikTok handle, etc.). Deletion will be performed within 7 business days and confirmed by reply.

1. What gets deleted

A data-deletion request triggers the following actions on our servers:

Revoke long-lived OAuth tokens for the platform account against the platform's revocation endpoint (e.g., Meta DELETE /me/permissions, TikTok POST /oauth/revoke/).
Delete the corresponding row from the oauth_tokens table.
Truncate all rows in social_metrics, social_metrics_raw, and publish_log scoped to that account.
Truncate audit-log entries scoped to that account.
Write a single deletion-confirmation row to a tamper-evident deletion_log table for audit purposes (contains timestamp + hashed account identifier only, no PII).

2. How to request deletion

Choose whichever path applies to you:

For the Operator

From inside the dashboard: Settings → Integrations → click Disconnect on the platform card, then confirm "Also delete all stored data" in the confirmation dialog. This calls POST /api/account/delete with the platform-scoped account ID and completes in under 2 seconds.

For platform reviewers

If you are a reviewer from Meta, TikTok, Google, or another platform and need data associated with a review test user deleted, email [email protected] with the test user identifier. We will confirm deletion by reply within 7 business days.

For platform-mandated deletion callbacks (Meta)

For Meta App Review purposes, this URL — https://legal.s0j0urner7.com/data-deletion — serves as the Data Deletion Instructions URL. If a programmatic callback is required, requests will be accepted at POST https://dash.s0j0urner7.com/api/account/delete-callback; details on request signing will be added here when implemented.

3. Timeline

Operator-initiated deletion: instant (under 2 seconds).
Email-initiated deletion (reviewers, external requests): within 7 business days.
Backups: any data in encrypted backups is overwritten on the next backup rotation (≤ 30 days).

4. What is not deleted

The tamper-evident deletion_log entry described in Section 1 is retained for audit purposes. It contains only a SHA-256 hash of the platform account identifier and a timestamp — no recoverable personal data.

5. Contact

For questions or to confirm a deletion request: [email protected]