Data deletion instructions

1. How to submit a data deletion request by email

Send an email to andy@nvision-data.com with Subject "Data Deletion Request — Social Integration" (or "Data deletion request" for general website/B2B enquiries) for a complete purge from Postiz, social-studio, and backups within the 30-day DSR window. No online form submission or account login is required.

To help us locate and delete your records accurately, please include in your email:

• The email address, phone number (for WhatsApp messages), or business website domain associated with your enquiry or outreach record.
• If your request concerns https://social.nvision-data.com (our self-hosted Postiz social publishing service on Oracle Cloud in the EU), the platform name (LinkedIn, Facebook, Instagram, TikTok, or X) and the connected profile handle, page name, or account identifier.
• Whether you want complete erasure of all records or an opt-out from future B2B outreach (for an opt-out, we delete your outreach profile and keep only a minimal suppression entry so we do not contact you again).

• Email andy@nvision-data.com (Subject: Data Deletion Request — Social Integration)

  Opens your email client addressed to andy@nvision-data.com with Subject "Data Deletion Request — Social Integration" pre-filled.

2. Verification step and 30-day DSR response timeline

Verification step: To protect your information from unauthorized deletion requests, we verify that the request comes from the person or authorized representative who controls the email address, phone number, or social media account in question. Where you write directly from the email address on file, no further verification is needed; if you write from a different address regarding a WhatsApp number or connected social channel, we may ask you to confirm via a short reply from that channel or account.

Response timeline: We acknowledge your request promptly and complete the purge from Postiz, social-studio, and backups — or explain in writing if a statutory retention rule applies — within the 30-day DSR window (30 calendar days / one month from receiving your verified request, in accordance with Articles 12(3) and 17 of the GDPR). For connected social media tokens in https://social.nvision-data.com, active token revocation and removal are typically completed within 48 hours of verification.

3. What is deleted

Once your request is verified, we permanently delete the matching records across our systems:

• Website enquiries (nvision_enquiries in Supabase): your submitted project brief, contact email, selected services, goal description, and associated email correspondence not tied to an active contract.
• WhatsApp Business messages (nvision_whatsapp_messages in Supabase): your inbound WhatsApp message records, sender phone number (wa_id), profile name, and message text.
• B2B outreach and preview records: your business contact details, prepared outreach messages, and private audit or proposal preview records, keeping only a minimal suppression entry if you asked not to be contacted again.
• Social publishing integrations (https://social.nvision-data.com / self-hosted Postiz, social-studio, and backups on Oracle Cloud EU): a complete purge from Postiz, social-studio, and backups within the 30-day DSR window — including all stored OAuth access/refresh tokens, connected profile/page identifiers (LinkedIn, Facebook, Instagram, TikTok, and X), scheduled drafts or unpublished posts, uploaded media files, and aggregate post analytics associated with that channel, with encrypted on-server backups ageing out within the rolling 7-daily / 4-weekly backup cycle inside the 30-day DSR window.
• Statutory accounting exception (Article 17(3)(b) GDPR): if we have issued invoices or executed commercial contracts with you or your company, we must retain those specific accounting and contractual documents for the period required by Romanian accounting and tax law (Law no. 82/1991, generally 5 to 10 years). All other non-mandatory personal data is deleted.

4. Disconnecting in the app and revoking permissions on each platform

(a) Disconnect or delete the channel inside https://social.nvision-data.com: if an account or page was connected to our social publishing service at https://social.nvision-data.com, an authorized operator can disconnect or delete the channel directly inside https://social.nvision-data.com (under Channels → Disconnect / Delete), which immediately removes the stored OAuth tokens.

(b) Revoke app permissions directly inside each platform: you can revoke our application's OAuth permissions at any time inside Facebook/Instagram ("Business Integrations"), LinkedIn ("Permitted services"), TikTok ("Apps and services permissions"), and X ("Connected apps") using the platform pages below. (c) Email andy@nvision-data.com with Subject "Data Deletion Request — Social Integration" for a complete purge from Postiz, social-studio, and backups within the 30-day DSR window:

• LinkedIn — "Permitted services" settings↗

  Sign in to LinkedIn → Settings & Privacy → Data privacy → Other applications → "Permitted services", and click Remove next to the integration.

• Facebook / Instagram (Meta) — "Business Integrations" settings↗

  Sign in to Facebook → Settings & privacy → Settings → "Business Integrations" (controls connected Facebook Pages and linked Instagram Professional accounts), select the integration, and click Remove.

• Instagram (Meta) — "Business Integrations" / Apps and websites permissions↗

  Sign in to Instagram → Settings and activity → Website permissions → Apps and websites (or Meta "Business Integrations"), select the integration, and choose Remove.

• TikTok — "Apps and services permissions" settings↗

  In TikTok → Settings and privacy → Security and permissions → "Apps and services permissions", select the integration and choose Remove access.

• X (Twitter) — "Connected apps" settings↗

  Sign in to X → Settings and privacy → Security and account access → Apps and sessions → "Connected apps", select the integration, and click Revoke access.

5. Controller details and supervisory authority

Data Controller: Nvision Data Solutions SRL, registered in Romania under Trade Registry no. J40/4857/07.05.2020, tax ID (CUI) RO42482410. Contact: andy@nvision-data.com or +40 750 404 005.

If you are not satisfied with how we handle your deletion request, you have the right to lodge a complaint with the Romanian supervisory authority — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București, Romania, website dataprotection.ro, email anspdcp@dataprotection.ro — or with the supervisory authority in your EU member state of residence or work.