Data deletion

1. What data is concerned?

• Your email and swiffvisuals account credentials
• Encrypted Instagram / Facebook OAuth tokens linked to your account (AES-256-GCM, server-side)
• Widget configurations you created (templates, colors, slugs)
• View / impression logs of your widgets
• Stripe billing history linked to your account

2. How to request deletion

Send an email to swiffvisuals@gmail.com from the address associated with your account, with the subject "Data deletion request".

Include:

• Your swiffvisuals account email
• The connected Instagram / Facebook account (if applicable, its @username)
• Optional: the reason (helps us improve the service)

3. Processing time

We process all requests within 30 days maximum from receipt, in compliance with GDPR Article 17. You will receive an email confirmation once deletion is complete.

Deletion automatically revokes the associated OAuth tokens on Meta's side: widgets installed on third-party websites will immediately stop displaying content.

4. Revoking from Facebook / Instagram directly

You can also revoke swiffvisuals' access to your Instagram account directly from:

• Instagram: Settings → Security → Apps and Websites → swiffvisuals → Remove
• Facebook: Settings → Apps and Websites → swiffvisuals → Remove

This action invalidates our stored tokens. We automatically purge associated data within 90 days maximum.

5. Data retained (legal obligation)

Some data may be retained beyond deletion for legal reasons:

• Stripe invoices (10 years, French accounting obligation)
• Anonymized technical logs (max 1 year, security)

6. Questions?

See our privacy policy for processing details, or write to us at swiffvisuals@gmail.com.