Deleting your data

Delete it yourself

Sign in, open your profile and choose "Delete account". You will be asked for your password again — an account is not deleted by a stray click — and the deletion starts immediately. No letter to us, no waiting for an answer.

If you are the only owner of a workspace that has other members in it, hand ownership over first: a workspace whose only owner walks out cannot be billed, invited into or closed, and its remaining members would be locked out of their own work.

What happens at that moment

It starts the moment you confirm, and it runs in steps — it cannot be one transaction, because part of it happens at Facebook, at Telegram and in our file storage, and nobody can promise a platform and a database will fail or succeed together. If a platform or the storage does not answer, we finish the rest anyway, record what was left over, and a background sweep completes it. Your account itself is erased in a single transaction regardless: whatever happens outside, the person stops existing here.

• you leave every workspace you are a member of;
• a workspace where you were the last member is closed: everything still waiting to publish is cancelled, and the workspace is marked deleted;
• for those workspaces we ask each platform to revoke our access — wherever the platform offers such a call — and then destroy the stored channel tokens and the uploaded media outright;
• your password, your linked social sign-ins, your second factor and its backup codes, every session and every pending confirmation link are deleted;
• your name, e-mail, picture and time zone are erased from your account row.

If you came from Facebook or Instagram

Removing our app from your Facebook settings sends us a deletion request automatically. We record it, disconnect the channels that belong to that Facebook account and stop publishing to them.

That request covers the connection, not your whole luv-social account — delete the account itself as described above if that is what you want.

What remains, and why

Three things survive the erasure, and none of them is a readable copy of you:

• A tombstone instead of your account: the row itself stays, holding no name, no picture and no readable address — only a one-way marker computed from your e-mail with a secret key. It exists because the workspace history, the audit log and the authorship of posts point at that row; deleting it would either erase a whole workspace's history or leave it broken. The marker cannot be turned back into an address, and it is what lets us recognise a returning person without storing who they were.
• Records the law requires us to keep: invoices and payment records, for as long as tax and accounting rules demand.
• Backups: for [to be filled in: backup retention] days, until they roll over. We do not restore a backup to bring deleted data back.

How long it takes

The erasure itself is immediate. A workspace closed by it is removed for good 30 days later; until then, writing to us can undo the closure.

The publication records of a closed workspace are cleared on their own schedule — 90 days for the content of an attempt, 180 days for the timeline — as described in the Privacy Policy.

If you cannot sign in

Write to [to be filled in: privacy address] from the address of the account. We will confirm it is yours, delete it for you and answer within 30 days.