Data Deletion Policy

1. How to Submit a Request

Privacy contact: app@level4businesses.com

Suggested email subject: Delete My Data

In your email, tell us:

• The email address associated with the account or with the information you want removed.
• Whether you want your account closed, specific records deleted, or both.
• If you are not the account holder, which business you dealt with and what information of yours is involved.
• Any detail that helps us locate the records, for example a showcase page you submitted a form on, or the email address that received outreach.

You may also use the contact address on a showcase page to reach the business that operates it, where the information belongs to that business rather than to us.

2. How We Verify the Request

Before deleting information, we confirm the request comes from someone entitled to make it.

• For an account: we send a verification message to the email address on the account and ask you to confirm from that address. If you no longer have access to it, we ask for enough information about the account to establish control, and we may require additional confirmation before proceeding.
• For a prospect or lead record: we verify that you control the email address or phone number in the record, typically by confirming a message sent to it.
• For a connected third-party account: deletion must be requested from an authorized user of the workspace that connected it, or through the provider's own permissions page.

We may decline a request we cannot verify, or one that appears to be an attempt to delete another person's information, and we will explain why.

3. What Can Be Deleted

• Your account profile and business profile: business name, website, location, industry, model, targets, offer materials and brand assets.
• Generated deliverables held in your workspace: offers, positioning, content drafts and pages, ad plans, outreach drafts, forecasts and reports.
• Prospect and lead records in your workspace, including contact fields, notes and scores.
• Outreach history held in your workspace, and the delivery records associated with it.
• Consent records and suppression entries tied to an address in your workspace, subject to the retention described below.
• Connected-account authorization tokens, which are revoked so the platform can no longer act on the connected account.
• Session and preference data held in your browser, which you can clear yourself at any time.

Where the information belongs to a business workspace and you are a prospect of that business, we will action the deletion in that workspace and inform the business, because the business controls it.

4. Disconnecting Connected Accounts

Google

You can disconnect a connected Google account in two ways: from the platform's connection settings, or from your Google Account third-party access page at myaccount.google.com/permissions. Disconnecting revokes our access and we delete or invalidate the stored token. Email sending and Search Console reporting stop immediately.

Facebook and Instagram

Where a Facebook or Instagram connection is enabled for your account, you can remove it in Facebook settings under Apps and Websites, or disconnect it in the platform. Removing the connection at Meta stops our future access. It does not by itself delete records already created in the workspace.

TikTok

Where a TikTok connection is enabled, you can remove it in TikTok settings under Security and permissions, Manage app permissions, or disconnect it in the platform.

Other platforms

Where another connection is enabled for your account, you can revoke it in that provider's own settings. Revoking access does not, by itself, delete records already created in a workspace, for example messages already sent or posts already published. Request deletion of those records using the process above.

5. What May Be Retained

Some records are kept after an account closes, because the law requires it or because keeping them is necessary to honor a choice you made:

• Suppression and opt-out records. These exist to make sure a person who opted out is not contacted again. Deleting them would defeat the opt-out, so they are retained while needed for that purpose.
• Billing, invoice and tax records required by tax and accounting law, retained for the applicable statutory period.
• Records needed to resolve a dispute, enforce an agreement, detect fraud, or respond to a lawful request.
• Residual copies in rolling backups and logs, which are overwritten or deleted as the backup cycle turns over.
• Aggregated or de-identified information that no longer identifies you.

We tell you which categories apply when we respond to your request.

6. How Long It Takes

We acknowledge a verified request promptly and complete it within 30 days. If a request is complex or involves a large volume of records, we may extend that period, and we will tell you before the initial period ends and explain why. Requests that require verification from a third party may take longer.

Deletion from live systems happens when we complete the request. Copies in backups are removed as those backups expire.

7. Confirmation and Status

We confirm by email to the address you used to make the request, stating what was deleted, what was revoked, and what was retained and why. If we cannot fulfill part of a request, we explain the lawful basis and tell you how to appeal or complain to a data protection authority.

8. Account Closure Within the Platform

Deleting individual records inside a workspace, such as a lead, a draft or a page, is available in the product and takes effect immediately.

9. Platform Deletion Callbacks

This page is an informational policy, not a machine-readable deletion callback. If a connected platform requires a technical deletion callback, that endpoint is implemented and verified separately, and this page will be updated to state that it is available before we claim it is.