Delete your data

You have two separate ways to remove data from Lumafly, depending on what you want to delete. Pick the one that fits your situation:

• Disconnect a social account, remove just the Facebook, Instagram, TikTok, or other social-platform data Lumafly stored when you connected that account. Your Lumafly account and the content you generated stay intact.
• Delete your entire Lumafly account, wipe everything: your business profile, generated posts, uploaded photos, social connections, billing history, the lot.

Both flows are user-initiated and take effect immediately. If you need help with either, contact us at [email protected] and we'll process the request manually within 5 business days.

When you connect a social platform to Lumafly, we store identifiers and access tokens needed to publish on your behalf, for Meta that's your Facebook Page ID, Instagram Business account ID, and the Page access token. Disconnecting removes all of those from our database.

How to disconnect:

1. Sign in to Lumafly at app.lumafly.ai.
2. Go to Connections in the sidebar (or visit app.lumafly.ai/connections).
3. Find the platform you want to disconnect (e.g. Instagram or Facebook). Click the three-dot menu on its card and select Disconnect.
4. Confirm. The connection is removed immediately, tokens are revoked, identifiers deleted, and Lumafly stops being able to post to that account.

What gets deleted: the social-account row in our database (platform name, account ID, page ID, access token, refresh token, scopes, expiry timestamps). Posts you previously published through Lumafly to that platform stay on the platform itself, we don't delete those, because Lumafly no longer has permission to do so once you disconnect.

What stays: your Lumafly account, generated content in your Media library, business profile, menu, billing history.

You can also disconnect from the social platform's side. For Meta: go to Facebook Settings → Business Integrations → find Lumafly → Remove. We receive a deletion signal from Meta and clear the tokens from our side automatically.

This permanently removes every piece of data tied to your account.

How to request:

1. Sign in to Lumafly at app.lumafly.ai.
2. Click your profile avatar (top-right) → Settings.
3. Scroll to the Danger zone section.
4. Click Request account deletion. Confirm in the dialog.
5. You're signed out from every device immediately. Your account is locked from further use and queued for permanent purge.

If you can't sign in for any reason, email [email protected] from the address tied to your account. We'll verify identity and process manually.

What gets deleted:

• Your user record (email, name, hashed password, OAuth identifiers)
• Business profile (name, address, phone, website, menu, business hours)
• All uploaded photos and videos in your Media library
• All AI-generated content (posts, reels, posters, captions)
• All scheduled and published posts within Lumafly's system
• All connected social-account tokens and identifiers
• All notifications and messages
• Billing history beyond what tax law requires us to retain (see below)

What we retain (and why):

• Stripe billing records, invoices, charges, refunds. Required by US tax law to be retained for 7 years. Stripe holds these, not Lumafly's database; we delete our local Stripe customer ID but Stripe's own records persist for compliance.
• Audit logs, high-level access logs (login timestamps, IP addresses) for up to 90 days, then purged. Required for security incident investigation.

What does NOT get deleted: any posts that were published to third-party platforms (Instagram, Facebook, TikTok, etc.) during your time using Lumafly. Those live on those platforms; you'd need to delete them there directly.

Disconnecting a social account is immediate. The database row is deleted within seconds of you clicking Disconnect; tokens are revoked the same moment.

Account deletion works in two phases:

1. Lockout (immediate), the moment you submit the request, every active session is terminated and your account is locked. You cannot sign in again. Lumafly cannot post on your behalf anymore.
2. Permanent purge (within 30 days), an operator processes the queued request and physically wipes the data per the list above. Most requests are processed within 5 business days.

The 30-day window is a buffer in case the request was made by accident, email [email protected] within that window to cancel. After 30 days the purge is irreversible.

For any data-deletion question, edge case, or to escalate a request manually:

Email: [email protected]
Subject line: "Data deletion request, [your account email]"

We reply to every data-deletion email within 5 business days.