Data Deletion Instructions

1. What gets deleted

When you delete your account or we complete your request, the following data is permanently removed or anonymised:

• Your DMDrop user account (name, email address, profile picture).
• Your creator profile and storefront (display name, bio, username).
• Connected Instagram accounts. Access tokens are revoked and deleted.
• All automation campaigns and their settings.
• Automation logs, including comment and message text and commenter identifiers. Without a deletion request, these logs are deleted automatically after 90 days.
• Digital products, affiliate products, and lookbooks you created.
• Your Dodo Payments customer reference and subscription records.

2. What we are required to keep

Order and transaction records may be kept for up to 7 years to meet accounting and tax laws. These records are anonymised: your name and email are replaced with a pseudonymous identifier, and the records are not used for any other purpose.

3. Delete your account yourself (recommended)

If you can sign in, you can delete everything in a few clicks:

1. Sign in at dmdrop.store/sign-in.
2. Open Account settings → Security. You can also get there from your name at the bottom of the sidebar.
3. In the Account section, click Delete my account.
4. Type DELETE to confirm, then click Delete account.

Your data is removed from our active databases straight away and you are signed out of every device. Remaining copies in encrypted database backups are overwritten within 30 days. Deletion cannot be undone.

4. Request deletion by email

If you can't sign in, or you are a customer who never created a DMDrop account, email [email protected] with the subject Data Deletion Request and include:

• The email address you used with DMDrop, or your Instagram username.
• Whether you are a creator, a customer, or an Instagram user who commented on or messaged an account that uses DMDrop.
• Anything specific you want deleted, if not everything.

We reply within 5 business days and complete deletion within 30 days of verifying your identity.

5. Instagram and Facebook users

If you connected Instagram to DMDrop, you can also request deletion from Meta:

1. In Instagram, go to Settings → Website permissions → Apps and websites, find DMDrop, and remove it.
2. Or in Facebook, go to Settings → Apps and websites → Removed, select DMDrop, and send a deletion request.

Meta then sends us a signed request at /api/meta/data-deletion. We delete your Instagram tokens, campaigns, and related personal data, and Meta shows you a link back to this page with a confirmation code.

Removing DMDrop in Instagram or Facebook without sending a deletion request only revokes our access. We stop receiving new data from your account.

6. Questions

For questions about this process or your rights under GDPR, CCPA, or other privacy laws, email [email protected] or use our contact form. See our Privacy Policy for how we handle your data.