Legal

Data Deletion

Last updated: July 23, 2026

This page explains how Artists and Fans can request deletion of their accounts and personal data from R.O.S.Y., and how R.O.S.Y. handles Meta’s required Data Deletion Callback for connected social accounts.

1. Deleting an Artist Account

Artists can request deletion by emailing privacy@myrosy.app from the address associated with the account, or by contacting support from inside the dashboard. Before deletion completes, we recommend that Artists:

  • Pause or cancel active campaigns and scheduled social posts.
  • Withdraw any available balance from Stripe Connect.
  • Export any fan or order records they wish to retain.

2. Deleting a Fan Account

Fans can request deletion by emailing privacy@myrosy.app from the address associated with the account. Deletion removes the Fan’s account profile from R.O.S.Y. Fan profile records that Artists have collected through purchases or opt-ins may still be visible to those Artists in the Artist’s CRM; Fans can additionally request suppression of their email from a specific Artist’s mailing list by replying “unsubscribe” to any campaign email or by contacting the Artist directly.

3. Disconnecting Social Media Integrations

Artists can disconnect Meta (Facebook / Instagram), Google / YouTube, or TikTok at any time from Dashboard → Social → Accounts. Disconnecting revokes and deletes the OAuth tokens R.O.S.Y. stores for that account. You may additionally revoke R.O.S.Y.’s access from the provider’s own security or connected-apps settings.

4. Meta Data Deletion Callback

When a user removes the R.O.S.Y. app from their Meta account, Meta sends a signed data deletion request to a dedicated endpoint on our servers. R.O.S.Y. verifies the signature, deletes the associated OAuth tokens, marks the affected social account records as disconnected, and returns a confirmation code as required by Meta’s Platform Terms.

The Data Deletion Callback URL registered with Meta is:

https://myrosy.app/api/public/oauth/meta/data-deletion

5. How Long Deletion Takes

We aim to complete deletion requests within 30 days of verification. Backups are retained on a rolling schedule and are overwritten within 90 days, after which the deleted information is fully removed from our systems.

6. Information That May Be Retained

Certain information may be retained after account deletion where retention is required by law or is necessary for legitimate business purposes, including:

  • Records of completed financial transactions (order totals, payouts, refunds) retained for tax and accounting purposes.
  • Fraud, abuse, and security investigation records.
  • Aggregated or de-identified information that can no longer be linked to an individual.

7. Contact

For any question about a deletion request, contact privacy@myrosy.app.