Data deletion

What you can ask for

• Removal of one advertising account (Meta, Google Ads or TikTok) or one Google Analytics property, and the data stored under it.
• Deletion of a whole workspace: every connection and every person in it.
• Deletion of your own account.

How to ask

• Step 1. Write to privacy@cigos.app from the address of your account. Name the workspace and say what should be deleted.
• Step 2. Withdraw the access you granted: in the settings of the advertising or analytics platform, or of the data connector, wherever you approved it.
• Step 3. We confirm who you are before anything is deleted.

If you connect Meta directly

This part applies once the direct Meta connection (Facebook Login for Business) is offered to your workspace. Until then, Meta data reaches the service only through the data connector described above.

• Request deletion from Facebook: in your Facebook settings, under business integrations, remove the app and choose to send a data deletion request. Meta forwards the request to us.
• You receive a confirmation code and a link to the request's status page. The page shows only the status (Received, In progress, Deleted, Refused with a reason, or No data is linked to this account) and when it changed; it never shows the workspace or the Meta account id.
• The operator carries out the deletion through the procedure above and answers within 30 days of receiving the request.
• Removing the app without a deletion request: Meta notifies us and the notice is recorded. Disconnecting automatically on that notice is not switched on yet; to disconnect, use «Disconnect» in the product or send a deletion request.

What happens next

• The stored credentials for the connection are removed.
• The data stored under that advertising account or analytics property is deleted from the live database.
• For your own account: your sign-in sessions, sign-in codes and workspace memberships are deleted, your display name is replaced with the marker "[erased]" and the account is disabled.
• Each deletion is recorded: what kind of deletion, when, and how many rows. The record holds no advertising or analytics data, only a fingerprint and the last four characters of the account identifier.
• You receive a confirmation by email.

A request is completed within 30 days of confirming who you are.

Reports and creative work that are not stored under a single connection are not removed with that connection. They are removed when the whole workspace is deleted.

We confirm by email when the deletion is complete, or explain what we could not delete and why.

Backups

Backups made before the deletion still contain the data until they expire. Copies on the server are access-restricted and expire after 14 days. Encrypted copies outside the server expire according to the backup retention schedule: 30 days.

What is kept

• Sign-in and authorisation records are kept for up to 24 months, as the privacy policy states. Records of decisions taken in a workspace stay with that workspace. Both contain your account identifier, which can include your name, and it is not removed from them. The same identifier stays in the record of who granted access to other people.
• Backups are not edited; see above.
• We also keep what the law requires us to keep, such as accounting records, for as long as the law requires.

Not built yet

• A button to disconnect an account or delete data yourself.
• Automatic deletion after a fixed period.
• Self-service data export.
• Removal of one Search Console property on its own.