Data Deletion Policy

Effective as of 1 June 2025

DataPanda is committed to your right to data deletion under the EU General Data Protection Regulation (GDPR), Article 17 (Right to Erasure / "Right to be Forgotten"). This page explains what data we hold, how to request deletion, and what we delete.

---

1. What Data We Store

When you use DataPanda, we may store:

• Your email address and hashed password
• Your Stripe subscription reference and billing history
• Connected Instagram account data (username, tokens, analytics data)
• Generated reports (cached data used for report display)
• Activity logs (actions performed within the platform)
• Shared report links and associated data

2. How to Request Data Deletion

You can request complete deletion of your account and all associated data by:

• Email: Send a deletion request to hello@digimarkstudio.com from your registered email address, with the subject line "Data Deletion Request"
• In-app: Use the account deletion option in your profile settings (if available)

We will process your request within 30 days and confirm once deletion is complete.

3. What Is Deleted

Upon a verified deletion request, we will delete:

• Your account credentials (email address, hashed password)
• All connected Instagram account data and access tokens
• All cached report data and generated reports
• All activity logs associated with your account
• All shared report links
• Your profile and subscription reference in our system

4. Data We May Retain

In limited circumstances, we may be required to retain certain data after deletion:

• Financial records: Billing and payment records are retained for up to 10 years as required by German tax law (§147 AO)
• Legal obligations: Any data required to comply with a legal obligation, court order, or regulatory requirement
• Anonymised data: Aggregated, anonymised analytics data from which you cannot be identified

Retained data will be isolated and not used for any purpose other than the legal basis that requires its retention.

5. Meta / Instagram Data Deletion

DataPanda accesses Instagram data via the Meta Graph API. Upon account deletion, we remove all locally stored Instagram data. For deletion of data held by Meta/Instagram directly, please use Meta's data deletion tools at facebook.com/help/delete_account.

If you connected your Instagram account via Meta and wish to revoke DataPanda's access, you can do so at any time in your Facebook App Settings.

6. Deletion After Account Inactivity

If your account has been inactive (no login) for more than 24 months and your subscription has lapsed, we may delete your account and associated data after providing 30 days' notice by email.

7. Sub-Processor Deletion

We will request deletion of your data from our sub-processors (such as our hosting provider) as part of the account deletion process. Payment records held by Stripe are subject to Stripe's own data retention policies.

---