Data deletion

If you removed Kitor from your Facebook or Instagram account, Meta gave you a confirmation code. Enter it on the status page to see where the request stands:

Check a confirmation code

Signed-in owners can remove any connection themselves. Tokens are deleted the moment you do.

• Instagram: Settings → Instagram → Disconnect. Kitor also asks Meta to stop sending webhooks for that Page.
• YouTube, TikTok, Threads, Facebook Page: Settings → Channels → Disconnect next to the channel. The media-kit section for that platform disappears with it.
• Mailboxes: Settings → Mailboxes → Disconnect.

Go to Facebook → Settings & privacy → Settings → Apps and websites (or Instagram → Settings → Website permissions → Apps and websites), find Kitor and choose Remove. Tick the option to delete the data the app has, if Meta shows one.

Meta then sends a signed deletion request to Kitor. We disconnect every Instagram account and Facebook Page that matches, destroy their access tokens, and delete the follower records and media-kit snapshots that came from them. Meta shows you a confirmation code and a link to the status page.

Removing the app without the delete option triggers a deauthorization only: tokens are destroyed and the account is marked revoked, but the workspace keeps its settings so the owner can reconnect later.

To delete your whole workspace, data from an account you can no longer sign in to, or anything else this page does not cover, email info@kitor.app:

1. Write from the address on your Kitor account, or from the account that owns the Instagram profile, YouTube channel or mailbox in question. We may ask one follow-up question to confirm it is you.
2. Say what to delete: the whole workspace, one connected account, or specific messages, leads or files.
3. We confirm in writing when it is done. Under the GDPR we answer within one month; in practice it is usually a few days.

Members of a creator's audience whose comment or message was handled by an automation can use the same address to ask which workspace holds it, to object, or to have it deleted.

Disconnecting in Kitor deletes our copy of the token; revoking on the platform side stops the platform from issuing a new one until you connect again. Both are worth doing.

• Google (Gmail, YouTube): myaccount.google.com → Security → Your connections to third-party apps & services → Kitor → Delete all connections.
• Microsoft 365 / Outlook: account.live.com/consent/Manage (personal) or myapps.microsoft.com (work) → Kitor → Remove.
• TikTok: Settings and privacy → Security & permissions → Apps and services → Kitor → Remove access.
• Facebook, Instagram, Threads: see section 2 above.

• The security audit log entry that records the deletion itself (the date, which accounts matched, and the request id). It contains no message content.
• Encrypted database backups, which are overwritten on a rolling 14-day schedule.
• Anything the law requires us to keep, such as invoices.

The full picture of what Kitor stores is in the Privacy Policy.

Unex Technologies · info@kitor.app