Data Deletion Instructions

1. Data we hold from Meta and Google

We only hold platform data after a business customer or authorized user connects an account in the Legible Marketing admin or client portal, or after someone messages a business that uses Legible Marketing. Depending on what was connected, this can include:

• Facebook and Instagram (Meta): your Meta user ID and name, the Facebook Pages and Instagram professional accounts you connect, encrypted access tokens, Page and Instagram catalog metadata, Messenger and Instagram direct messages and comments received in our unified inbox, posts published through Legible Marketing, and post insights
• Google: the name and email address of the Google account you connect, encrypted access tokens, and data from the Google services you enable (for example Google Calendar appointments, Google Analytics, Search Console, and Google Ads reports, Google Business Profile reviews, and YouTube channel details)
• People who message a business on Facebook or Instagram: your name or username and the messages you sent, stored in that business customer's account

2. Remove Legible Marketing's access

You can stop our access at any time using any of the options below. Once access is removed, we can no longer read from or post to that account. When you disconnect in our portal, or Meta notifies us that you removed the app, we revoke permissions where the platform allows and delete or invalidate the stored access tokens. Removing access does not by itself erase data we already stored; to have that deleted, send a request as described in section 3.

• Facebook: go to Settings & privacy > Settings > Apps and websites, select Legible Marketing, and click Remove
• Instagram: go to Settings and activity > Website permissions > Apps and websites, select Legible Marketing, and tap Remove. Instagram professional accounts connected through a Facebook Page also lose access when you remove Legible Marketing in Facebook
• Google: go to https://myaccount.google.com/permissions, select Legible Marketing, and remove its access
• Legible Marketing admin or client portal: click Disconnect on the Facebook, Instagram, or Google integration

3. Ask us to delete your data

Email legiblemarketing@gmail.com with the subject "Data deletion request", or use the data deletion request form at https://legiblemarketing.com/en/privacy-policy#data-deletion. Include the name and email address on your account, which platform the request is about (Facebook, Instagram, or Google), and the Facebook Page, Instagram account, or Google account involved if you know it. Do not send passwords. We may ask you to confirm that you control the account before we delete anything. If you contacted a business through Facebook or Instagram, that business controls your conversation; we will forward your request to them and help them carry it out.

4. What we delete and how long it takes

Within 30 days of verifying your request, we delete the platform data described in section 1 that is linked to you, including access tokens, profile details, messages, comments, catalog data, and synced Google data, and we email you to confirm. Copies in encrypted backups are removed as those backups expire on their normal schedule.

5. What we may keep

We may keep limited information when the law requires or allows it, only for that purpose and only for as long as needed:

• Invoices and billing records required for tax and accounting
• Messaging consent and opt-out (STOP) records required by telephone and messaging laws
• Records needed to resolve disputes, enforce our agreements, or respond to lawful requests from authorities
• Security and fraud-prevention logs
• A record that you asked for deletion, so we can keep honoring it

6. Contact

Legible Marketing — legiblemarketing@gmail.com — https://legiblemarketing.com/en/contact