Data Deletion Instructions

You can delete your SmashOne account and the personal data associated with it at any time. This page explains the two ways to do that, exactly what gets deleted, how long deletion takes, and the narrow categories of records we are required to keep under U.S. law. This page is public and requires no sign-in.

1. Sign in to your SmashOne workspace at app.smashone.us.
2. Open Settings → Account.
3. Choose Delete account and confirm. Active subscriptions are cancelled as part of deletion.

Deleting your account disconnects every social platform you linked (including Facebook and Instagram), revokes and deletes the stored access tokens, and starts the deletion of your personal data described below.

Email [email protected] with the subject line "Data Deletion Request" from the email address on your account. If you no longer control that address, tell us and we will verify your identity another way (we match the details you provide against the information on file; we never ask for your password).

We confirm receipt within 10 business days and complete verified deletion requests within 45 calendar days (extendable once by a further 45 days where reasonably necessary — we will tell you if that happens).

If you connected Facebook or Instagram to SmashOne, we store the page/profile identifiers, access tokens, and the messages and comments the platform delivers to us so the service can operate. When you delete your account (or disconnect a platform), we delete those tokens and platform-derived data as part of the deletion described on this page.

You can also remove SmashOne's access directly on the platform side at any time — for example via Facebook: Settings & privacy → Settings → Apps and websites → SmashOne → Remove. Removing the app on the platform revokes our access; to also erase the data already stored with us, use Option 1 or Option 2 above.

• Your account profile (name, email, phone, sign-in credentials, two-factor secrets).
• Your business workspaces, drafts, scheduled and published content stored in SmashOne, and uploaded media.
• Conversations and contact records processed through connected messaging channels.
• Social platform connections and all stored access tokens.
• AI assistant configuration and knowledge-base content you provided.
• Product analytics identifiers associated with your account.

Deletion removes your personal data from live systems. A narrow set of records is retained only as long as U.S. law requires, then destroyed:

• Billing, invoicing, and tax records — kept up to 7 years to satisfy federal and Florida tax and accounting obligations.
• Fraud-prevention and security logs — kept for a limited period to detect abuse, then purged.
• Records of your deletion request itself — kept as evidence of compliance.
• Data subject to a legal hold — where retention is required for an active legal claim or lawful government request.

Encrypted backups age out on a fixed rotation; data deleted from live systems disappears from backups as that rotation completes.

If you are a California resident, the right to delete described on this page is your right under the California Consumer Privacy Act as amended by the CPRA. In addition:

• We will not discriminate against you for exercising your privacy rights.
• You may use an authorized agent to submit a deletion request on your behalf; we will verify the agent's authority and your identity.
• We instruct our service providers to delete your personal information from their records as part of fulfilling your request.
• Deletion requests are honored subject to the exceptions permitted by California Civil Code §1798.105(d) (for example, completing a transaction you requested, security and fraud prevention, and legal compliance).

Our full privacy practices, including all California rights (know, correct, opt-out of sale/sharing), are described in the Privacy Policy.