1. Overview
You stay in control of your data. This page explains every way to remove it from Postalu Social Hub, how fast each one works, and what is kept afterwards. It also describes how we handle deletion requests that come from Meta (Facebook, Instagram and Threads), and meets the user-data deletion instructions required by Meta, Google, LinkedIn, TikTok and X.
| I want to… | Fastest way | Speed |
|---|---|---|
| Stop Postalu posting for me | Disconnect the account (option 1) | Instant |
| Remove my photos and videos | Delete media or cancel the scheduled post (option 2) | Instant |
| Remove my posts and history | Delete the post, or request deletion (options 2 and 5) | Instant, or within 30 days by request |
| Cut off access from the platform side | Revoke the app on the platform (option 3) | Instant |
| Delete my login | Ask my administrator, or email us (option 4) | Instant by an administrator, otherwise within 30 days |
| Delete everything | Email us (option 5) | Within 30 days |
2. Option 1: Disconnect a social account (instant)
- Sign in to Postalu.
- Open Settings and find the connected account.
- Press Disconnect next to the platform (Instagram, Facebook, Threads, TikTok, YouTube, LinkedIn or X).
Posts that were scheduled for a disconnected account will fail instead of publishing. Cancel them first on the Scheduled page if you want to remove their media too.
3. Option 2: Delete media, scheduled posts and post history
- Automatic: the files of a post are deleted as soon as every selected platform has the post, with nothing for you to do.
- Delete the files of a post sooner: contact us and the Postalu team will delete the stored files. The post record and its statistics remain.
- Cancel a scheduled post: on the Scheduled page choose Cancel. The scheduled post and its stored media are deleted immediately.
- Delete the whole post record: people with the delete permission can delete a post, which removes its record and its media.
- Nothing is left behind by accident: any file that is still in storage is removed automatically 32 days after upload.
Deleting a post in Postalu does not remove it from the social platform. Delete it there as well if you want it gone everywhere.
4. Option 3: Revoke access from the platform
You can also remove Postalu's permissions on each platform. After you do, the stored tokens stop working immediately; delete them from Postalu too (option 1).
| Platform | Where to remove Postalu |
|---|---|
| Google / YouTube | myaccount.google.com/permissions → select Postalu → Remove access. |
| Meta (Facebook, Instagram, Threads) | Settings and privacy → Settings → Business integrations (or Apps and websites) → remove Postalu. For Threads: Settings → Account → Website permissions. |
| TikTok | Profile → Settings and privacy → Security and permissions → Manage app permissions → revoke Postalu. |
| X | Settings and privacy → Security and account access → Apps and sessions → Connected apps → revoke Postalu. |
| Settings and privacy → Data privacy → Permitted services → remove Postalu. |
5. Option 4: Delete a team member account
Ask your organisation's administrator to delete your account from the Users page, or email privacy@postalu.com and we will arrange it with your administrator.
- Removed immediately: your login (email, name, profile picture and its stored file, password hash), all active sessions, your two-factor secret and your recovery codes.
- Kept: posts you created, which belong to the organisation and show as created by “Deleted user”, and audit-log entries (see “What we keep” below).
- Deleting a team member does not disconnect the organisation's social accounts.
6. Other things you can remove yourself
- Profile picture: Settings → Security → Remove. The stored file is deleted immediately.
- Alert channels (Slack, Teams, email): an administrator can remove a channel in Alerts; its encrypted secret is deleted and an email subscription is cancelled (an address that was already subscribed to our uptime alert stays on that alert until it unsubscribes).
- Queue slots and preferences: delete them from the Calendar page.
7. Option 5: Request deletion of everything
To have all of your information deleted (account, connected accounts, posts, media, schedules and statistics), or to ask for a copy of it first, email us from the address on your account:
- We will confirm we received your request, and may ask you to verify your identity. For an organisation's data, we may need the administrator's confirmation.
- We aim to complete the deletion within 30 days and, where possible, within 48 hours. We will tell you when it is done.
- We cannot delete what the law requires us to keep, and we will tell you if that applies.
8. Deletion requests from Meta
When you remove Postalu in your Facebook, Instagram or Threads settings and ask Meta to delete your data, Meta sends our data deletion callback a request and receives a confirmation code and a link to this page. The code looks like CF-DEL-XXXXXX.
The callback records the request and gives you a confirmation code; it does not by itself delete anything. We then complete the deletion (disconnecting the account and removing its stored data) within 30 days. To remove access straight away, use option 1 and option 3.
If you have a confirmation code, add it to this page's address (/data-deletion?code=YOUR-CODE) to see that it was received.
9. What we keep, and for how long
| Data | After you delete or disconnect |
|---|---|
| Platform tokens, account IDs, stored names and pictures | Deleted at once when you disconnect. |
| Uploaded photos and videos | Deleted at once by the options above, and in any case within 32 days of upload. |
| Post records, schedules, results and statistics | Deleted when the post or the account is deleted, or when a deletion request is completed. |
| Login, sessions, two-factor secret, recovery codes | Deleted at once when the account is deleted. |
| Audit-log entries | They record security events (who, what, when, IP address) but never your media or tokens. We keep them for security and accountability, and delete or anonymise them on a verified request unless we must keep them for a legal obligation or an abuse investigation. |
| Subscription records | Paddle, our payment provider, keeps transaction and invoice records as the law requires. We delete our own subscription status with the workspace. |
| Database backups | Kept for up to 90 days and then expire. Data you delete stays in a backup until that backup expires and is not used for any other purpose. |
| Operational server logs | Expire automatically after 30 days. |
| Copies on social platforms | Posts already published stay on the platform until you delete them there. We cannot delete data held by those platforms. |
Backups exist only to restore the service after a failure and are not an archive of your content.
10. Questions
See our Privacy Policy, Terms of Use and Data Processing terms, or email privacy@postalu.com.
Last updated October 12, 2026 · Version 3.2
