Your Right to Data Deletion
Under the General Data Protection Regulation (GDPR), you have the right to request the erasure of your personal data. We take this right seriously and have made the process as straightforward as possible.
What Data We Store
When you use Merkflow, we may store the following data associated with your account:
- Account information: Name, email address, and profile picture from Google OAuth.
- Brand data: Brand names, descriptions, website URLs, onboarding profiles, and knowledge profiles generated from website crawls.
- Content: AI-generated posts, approved content, scheduled posts, and publication history.
- Platform connections: OAuth tokens for connected social media accounts (LinkedIn, Instagram, Facebook, X, TikTok), encrypted at rest with AES-256-GCM, along with account names and profile metadata.
- Analytics: Engagement data (impressions, likes, comments, shares) retrieved from connected platforms.
- Workspace data: Workspace membership, roles, and team invitations.
How to Request Data Deletion
Option 1: Delete from within the app (recommended)
You can delete your account and all associated data directly from the Merkflow application:
- Log in to app.merkflow.eu
- Go to Settings → Privacy & Data
- Click "Request account deletion"
- Type DELETE to confirm
Your account will be locked immediately (no further logins) and all data will be permanently deleted within 30 days. During the 30-day grace period, you can cancel the deletion by logging in and visiting the same settings page.
You can also download a copy of your data before deleting — click "Download my data" on the same page. The export includes all your account information, workspaces, brands, and posts in a portable JSON format. OAuth tokens and credentials are never included in the export.
Option 2: Send us an email
Send a deletion request to privacy@merkflow.eu from the email address associated with your Merkflow account. Include:
- Your full name
- The email address on your account
- A statement that you wish to have all your personal data deleted
We will verify your identity and process the request within 30 days, as required by GDPR.
Option 3: Facebook/Instagram data deletion
If you connected your Facebook or Instagram account to Merkflow and request data deletion through Facebook's settings, Facebook sends us an automated deletion request. We will:
- Remove your Facebook/Instagram OAuth tokens
- Delete your Facebook/Instagram account metadata (name, profile picture, follower count)
- Remove any Facebook/Instagram-specific analytics data
- Provide a confirmation code that you can use to check the status of your request on this page
This process is automatic and completes within 30 days.
What Happens After Deletion
- All personal data associated with your account is permanently removed from our production systems.
- Encrypted backups containing your data are purged within 30 days of the deletion request.
- Content that was already published to social media platforms remains on those platforms. Merkflow does not have the ability to delete content from your social media accounts after the fact. You can delete published posts directly on each platform.
- Anonymized, aggregated data that cannot be linked back to you may be retained for service improvement purposes.
Data Deletion for Workspace Members
If you are a member of a shared workspace:
- Deleting your account removes your membership from all workspaces.
- Content you created within a workspace remains attributed to "Deleted user" for audit trail purposes, but your personal information is removed.
- If you are the sole owner of a workspace, deleting your account will also delete the entire workspace and all its data (brands, posts, connections, analytics).
- If the workspace has other owners, your membership is removed but the workspace continues to exist.
Questions?
If you have any questions about data deletion or your privacy rights, contact us at privacy@merkflow.eu.
You can also review our full Privacy Policy for more details about how we handle your data.