Delete your account and your data

Email privacy@postyrx.com from the email address on the account, with the subject “Delete my account and data”. That is the whole process. You do not need to give a reason.

Sending from the account address is how we verify you. If you cannot — the address is gone, or someone else controls it — write anyway and we will find another way to confirm it is you before deleting anything. We would rather be slow than delete the wrong person’s work.

There is no self-serve delete button yet. We would rather tell you that than have you hunt through Settings for one. Deletion is handled by a person, against the list below, within 30 days — usually far sooner.

• Your account and profile, including the record held by our authentication provider.
• Every draft, variant and scheduled post, published or not.
• All media you uploaded or the agent generated for you.
• Your Brain in full — connected sources, the documents pulled from them, every passage and every embedding.
• All connected platform accounts, and the encrypted OAuth tokens behind them. Our copies are destroyed; invalidating the token at the platform itself is done from that platform’s app permissions screen.
• Your brand kits, campaigns, plans and weekly metrics.
• Your attribution data: links, visitors, clicks and conversion records belonging to your brands.

Three things are not removed. Each one is a legal or physical limit rather than a preference, and we would rather say so here than discover the disagreement afterwards.

• Invoice and payment records, for as long as tax and accounting law requires us to keep them. These hold what you were charged and when — not your content.
• Anything already published to a platform. We can delete our copy; a post that is live on Instagram or LinkedIn is in that platform’s hands, and you remove it there.
• Backups, until they age out on their normal cycle — at most 30 days. Deleted data is not restored into service from a backup.

Deletion does not have to be all-or-nothing. The first three of these you can do yourself, right now, without asking us:

• Disconnect a platform account. This deletes the access token, the refresh token and the cached profile from our database. It does not ask the platform to invalidate the token — to cut our access off at their end too, use that platform’s own app permissions screen.
• Delete a knowledge source, which removes every document and passage derived from it.
• Cancel a scheduled post, which stops it publishing. The draft behind it stays in your library.

The rest need an email, because nothing in the app does them yet:

• Delete one brand and everything scoped to it, keeping your account and your other brands.
• Delete your attribution history — links, visitors, clicks and conversions — and keep your content.
• Export everything first. Ask, and you get your content and your Brain in a machine-readable form before anything is removed.
• Remove a draft or a piece of media outright. Deleting a draft in the app hides it and keeps the row; media has no delete control at all yet. Ask us and both are removed properly.

If you use PostyrX to publish, your attribution records describe other people. When one of them asks you to delete their data, forward the request and we will remove it.

What we need is their visitor identifier — the value of the px_vid cookie, which they can read from their own browser. An email address alone will usually not find them, because we hold no reversible copy of one: emails in attribution are salted hashes, and a hash cannot be searched backwards. That is a deliberate trade — the same property that makes the data hard to abuse makes this request harder to serve.

Anyone can also stop being tracked by clearing that cookie, or by blocking it. Nothing in PostyrX re-identifies them afterwards.

Connecting Instagram, YouTube, LinkedIn, X or Reddit grants PostyrX a token. Deleting your PostyrX account destroys our copy of that token and removes the profile information the platform gave us. It does not ask the platform to invalidate the token itself, so revoke PostyrX in that platform’s app permissions settings as well if you want its access ended at both ends.

It does not delete anything on the platform itself. Posts we published for you remain where they were published until you remove them there, and any data that platform holds about you is governed by its own policy, not ours. You can also revoke our access directly from the platform’s app permissions settings without involving us at all.

A written confirmation naming what was deleted and the date it was done. If anything on the list in section 2 could not be deleted, that confirmation says which item and why, rather than quietly omitting it.