Data Deletion Policy

Social Covered Ltd ("Social Covered", "we", "our" or "us") is committed to giving customers clear control over their personal information. This Data Deletion Policy explains how you can request deletion of your personal data, how requests are verified, what information is deleted, what information may be retained to comply with legal obligations, and the expected processing times.

This policy complies with the UK GDPR and EU GDPR right to erasure (Article 17). It should be read alongside our Privacy Policy.

1. How to Request Data Deletion

To request deletion of your account and personal data, please email support@socialcovered.com with the following information:

• Your full name
• The email address associated with your SC Hub portal account
• Your company name (if applicable)
• A clear statement that you wish to delete your account and associated data

Alternatively, you can submit a deletion request through the contact form on our Contact page, selecting "Data Deletion Request" as the subject. We may request additional information where reasonably necessary to verify identity and protect customer accounts from unauthorised deletion requests.

2. Verification Process

Upon receiving your deletion request, Social Covered will:

• Verify your identity and confirm account ownership. This may involve sending a confirmation email to the registered address or requesting additional verification information.
• Confirm the scope of the deletion — whether you are closing your entire account or requesting deletion of specific data sets.
• We aim to complete verified requests within 30 days unless a longer period is permitted by applicable law. Complex requests may be extended by up to an additional 60 days, with written notification of the extension and reasons.
• Notify you by email once deletion is complete.

3. Account Closure Process

When you request full account closure, the following steps are taken:

• Your SC Hub portal account is deactivated and access is revoked.
• All active subscriptions are cancelled effective at the end of the current billing period, or immediately if requested.
• OAuth tokens for connected social media accounts are revoked and deleted.
• Connected platform access (Facebook, Instagram, Google, etc.) is disconnected.
• Personal data is deleted or anonymised in accordance with the retention schedule below.
• Closure of an account does not remove outstanding payment obligations or contractual commitments that arose before the closure request.

4. What Data Is Deleted

Upon an approved deletion request, we will delete or anonymise:

• Your portal account information (name, email, company details)
• Personal identifying information
• Service request history and deliverables
• Workflow activity and approval records
• Usage analytics associated with your account
• OAuth authentication tokens and platform connection data
• AI-generated recommendations and Sarah interaction data
• Customer-generated AI conversation history where it contains personal information
• Profile photographs and uploaded documents
• Support ticket history
• In-app messages and communication records
• Credit wallet and transaction records (personal data elements)
• All other personal data held by Social Covered

5. Data That May Be Retained

Some information may be retained where required by law or legitimate business interest:

• Financial and billing records: Retained for up to 7 years for accounting, tax, and audit compliance under UK HMRC requirements.
• Legal obligation records: Information required by court orders, legal proceedings, or regulatory requirements.
• Fraud prevention: Data necessary to prevent fraud, abuse, or security incidents.
• Dispute resolution: Records required for ongoing or potential dispute resolution.
• Anonymised data: Data that has been irreversibly anonymised and can no longer identify you may be retained for analytics and improvement purposes.
• System audit logs: Audit logs required for security monitoring, fraud prevention and legal compliance may be retained for an appropriate period where permitted by law.

6. Meta Integration and Connected Platforms

Social Covered integrates with Meta (Facebook and Instagram) through the Meta API and OAuth authorisation. When you request data deletion:

• We revoke and delete all OAuth tokens associated with your Meta accounts.
• We delete any Facebook Page information and Instagram Business Account information stored by Social Covered.
• Where required by Meta's platform requirements, Social Covered provides the necessary data deletion callback and deletes all data stored by Social Covered relating to authorised Meta integrations, in accordance with Meta's platform requirements.

To independently remove Social Covered's access to your Meta accounts at any time:

• Log in to Facebook and go to Settings & Privacy > Settings > Apps and Websites.
• Find "Social Covered" in your connected apps list.
• Select "Remove" to revoke access.

For Google accounts: Go to your Google Account Security settings, find "Social Covered" under Third-party access, and select "Remove access".

Revoking platform access through these settings will immediately prevent Social Covered from accessing or managing those accounts. Related SC Hub functionality may be disabled until access is re-authorised.

7. Expected Deletion Times

• Account deactivation: Typically within 24 hours of verification.
• OAuth token revocation: Typically within 24 hours of verification.
• Personal data deletion: Normally within 30 days of verification.
• Meta data deletion confirmation: Submitted to Meta within 30 days; Meta's own deletion timeline applies thereafter.
• Backup data removal: During scheduled backup lifecycle processes, normally within 90 days.

8. Right to Access Before Deletion

Before requesting deletion, you have the right to request a copy of all personal data Social Covered holds about you. This is known as a Subject Access Request (SAR). Email support@socialcovered.com to make this request. We will provide the data in a structured, machine-readable format within 30 days.

9. Cancellation of a Deletion Request

If you change your mind after submitting a deletion request, contact us immediately at support@socialcovered.com. If the deletion has not yet been processed, we will cancel the request and restore your account. Once deletion processing has commenced, recovery of deleted information may not be possible.

10. Policy Updates

We may update this Data Deletion Policy from time to time to reflect changes in legislation, technology, platform functionality or regulatory requirements. Updated versions will be published on this page with a revised "Last Updated" date.

11. Contact

For questions regarding data deletion, personal information requests, or account closure, please contact:

Social Covered Ltd — Data Protection

Email: support@socialcovered.com

Website: https://socialcovered.com