DATA DELETION POLICY

Last Updated: 01/07/2026

1. PURPOSE

This Data Deletion Policy explains how users may request deletion of personal information, account data, business information, social media integration data, and other eligible information processed through StartDotCom.

This Policy supplements the:

  • Terms of Service
  • Privacy Policy
  • Data Policy
  • GDPR Compliance Statement
  • Social Media Integration Policy

This Policy applies to all users of StartDotCom Services globally.

2. OUR COMMITMENT

StartDotCom respects the privacy rights of individuals and supports lawful requests for deletion of personal information where applicable.

Subject to legal, contractual, regulatory, security, fraud prevention, and operational requirements, we will take reasonable steps to delete or anonymise eligible information when valid deletion requests are received.

Not all information can be deleted immediately or completely in every circumstance.

3. INFORMATION THAT MAY BE ELIGIBLE FOR DELETION

Depending on the nature of the request and applicable legal requirements, eligible information may include:

Account Information

  • User profile details
  • Contact information
  • Account preferences
  • Login identifiers

Business Information

  • Business profiles
  • Uploaded business documents
  • Brand information
  • Planning information
  • Marketing information

CRM Information

  • Contact records
  • Customer records
  • Lead information
  • Sales records

Ecommerce Information

  • Product information
  • Store content
  • Ecommerce settings

Social Media Integration Data

  • Connected account information
  • Access tokens
  • Refresh tokens
  • Integration metadata
  • Publishing permissions

AI-Generated Content

  • Generated content
  • Generated business assets
  • Generated marketing assets
  • Generated planning materials

where deletion is permitted and requested by authorised users and where technically and legally feasible.

4. INFORMATION THAT MAY NOT BE DELETED IMMEDIATELY

Certain information may need to be retained even after deletion requests. Examples include:

Legal Obligations

Information required by law:

  • Tax records
  • Accounting records
  • Regulatory records

Security Investigations

Information necessary for:

  • Security monitoring
  • Fraud investigations
  • Abuse investigations
  • Incident response

Contractual Obligations

Information required to enforce:

  • Contracts
  • Payment obligations
  • Legal rights
  • Dispute resolution processes

Backup Systems

Temporary retention:

Certain information may remain temporarily within encrypted backups until backup retention cycles expire. Such information will not ordinarily be restored except where operationally necessary.

5. ACCOUNT DELETION

Users may request deletion of their StartDotCom account. Requests may be submitted through:

Verification may be required before account deletion is processed.

Deletion of an account may result in loss of:

  • Access to services
  • Stored content
  • AI-generated assets
  • Websites
  • Marketing data
  • CRM data
  • Ecommerce data
  • Subscription benefits

Deleted accounts may not be recoverable.

6. SOCIAL MEDIA DATA DELETION

Users may disconnect social media accounts through: Settings → Connected Accounts

Users may also request deletion of social media integration data by contacting: privacy@startdotcom.com

Upon successful verification, StartDotCom will take reasonable steps to remove:

  • Access tokens
  • Refresh tokens
  • Connection records
  • Integration metadata

This will be executed within thirty (30) days unless retention is legally required.

7. CRM AND CUSTOMER DATA DELETION

Customers using CRM functionality remain responsible for managing customer records stored within their accounts.

Authorised users may delete customer records directly through platform functionality where available.

Where assistance is required, requests may be submitted to: privacy@startdotcom.com

Customers remain responsible for ensuring deletion requests comply with applicable laws and contractual obligations.

8. ECOMMERCE DATA DELETION

Store owners may remove the following through available platform functionality:

  • Products
  • Store content
  • Customer-facing information

Transaction records may be retained where required by:

  • Accounting regulations
  • Tax laws
  • Regulatory obligations
  • Fraud prevention requirements

9. AI DATA DELETION

Where technically feasible and legally permissible, StartDotCom may delete:

  • AI prompts
  • Generated outputs
  • Related AI session records

Certain operational logs, security logs, audit logs, or system records may continue to be retained in accordance with legal and security requirements.

Unless expressly authorised by users, customer content is not used to train publicly available AI models.

10. IDENTITY VERIFICATION

To protect privacy and prevent unauthorised requests, StartDotCom may require identity verification before processing deletion requests. Verification methods may include:

  • Email verification
  • Account verification
  • Additional identity confirmation

Requests may be denied where identity cannot be reasonably verified.

11. DELETION TIMELINES

Once a request is verified and approved:

  • Most eligible information will generally be deleted within thirty (30) days.
  • Complex requests may require additional time where permitted by law.
  • Users may be notified if additional time is required.

Deletion timelines may vary depending on system architecture, backup cycles, and operational requirements.

12. ANONYMISATION

Where deletion is not practical, information may be anonymised. Anonymised information may be retained for:

  • Analytics
  • Reporting
  • Security
  • Service improvement
  • Statistical purposes

Anonymised information does not identify specific individuals.

13. REJECTED REQUESTS

StartDotCom may reject or partially fulfil deletion requests where:

  • Legal obligations require retention.
  • Fraud investigations are active.
  • Security investigations are active.
  • Contractual obligations remain outstanding.
  • Regulatory obligations require retention.
  • Identity verification fails.

Where appropriate, explanations may be provided.

14. EFFECT OF DELETION

Deletion may result in:

  • Permanent loss of access
  • Removal of stored content
  • Removal of business information
  • Removal of connected integrations
  • Loss of generated assets
  • Loss of historical records

Users should ensure they export any information they wish to retain before requesting deletion.

15. DATA RETENTION EXCEPTIONS

Nothing in this Policy requires StartDotCom to delete information where retention is necessary for:

  • Compliance with legal obligations
  • Establishment of legal claims
  • Defence of legal claims
  • Fraud prevention
  • Security purposes
  • Public interest obligations
  • Regulatory compliance

Such information will be retained only for as long as reasonably necessary.

16. GDPR RIGHTS

Individuals may exercise applicable rights including:

  • Right of Access
  • Right to Rectification
  • Right to Erasure
  • Right to Restriction
  • Right to Object
  • Right to Data Portability
  • Right to Withdraw Consent

Requests may be submitted to: privacy@startdotcom.com

17. CHANGES TO THIS POLICY

This Policy may be updated periodically.

Updated versions become effective upon publication unless otherwise stated.

Continued use of the Services constitutes acceptance of revised versions.

18. CONTACT INFORMATION