Deleting your data

There are two different requests, and they remove different things. Disconnecting a social account is immediate and you can do it yourself. Deleting your ScheduleLater account removes everything and is handled by a person.

Disconnect one social account

Sign in, open Accounts, and press Disconnect on the account you want removed. This happens immediately and removes, for that account:

• the stored authorization we use to post on your behalf, deleted from our database;
• the analytics we had cached from that platform — the per-post figures and the day-by-day rollups behind your Insights charts;
• and, on the platforms that offer apps a way to do it, the authorization itself at the platform (see below).

The posts you wrote in ScheduleLater are kept, because they are your own content rather than data we read from the platform. If you want those gone too, that is the second request.

Removing our access at the platform itself

Not every platform gives an app a way to hand an authorization back. Where one exists we use it the moment you disconnect; where it does not, you can remove us directly and we have said so rather than implying otherwise:

• YouTube — we revoke with Google immediately on disconnect. You can also review and revoke our access at any time in your Google Account security settings.
• TikTok — we revoke with TikTok immediately on disconnect. You can also remove our access in the TikTok app, under Settings and privacy → Security and permissions.
• Facebook and Instagram — Meta offers apps no revoke endpoint, so disconnecting deletes our stored authorization but cannot retire it on Meta’s side. Remove it yourself from the list of apps and websites connected to your account — on Facebook that is your apps and websites settings, and on Instagram the equivalent list in your account settings.
• X — the same: disconnecting deletes our stored authorization, and you can remove ScheduleLater from the connected apps list in your X account settings.

Delete your ScheduleLater account and everything in it

Email privacy@schedulelater.com from the address you signed up with, and ask us to delete your account. Sending from that address is how we confirm the request is yours; if you cannot, tell us and we will find another way to verify you before deleting anything.

What we do, in this order:

• revoke and delete every connected account’s authorization, as above;
• delete your posts, drafts, schedules and the media you uploaded — the files themselves, not just the records pointing at them;
• delete your Discover sources, ideas, pipelines and generated drafts;
• delete your analytics, brands, workspace settings and any API keys;
• and delete your login — your user record, password, two-factor secret and recovery codes.

How long it takes. Usually a few business days, and within 30 days at the outside. Part of the process deliberately waits a day so the stored media files are collected by the same routine that reclaims them normally — the safest way to be sure the file is gone and not merely the record of it. We reply to your email when it is finished, listing what was removed.

If you share a workspace with other people, deleting it would take their posts and their access with it. We will not do that silently — we will write back and agree what should happen first.

What we hold, and the distinction we make

When you connect a social account, ScheduleLater stores:

• identifiers for the connected account — the platform’s own id for your Page, profile or channel, and the handle and display name we show you;
• an authorization to act on your behalf within the permissions you granted, encrypted at rest and never shown or logged;
• the posts you published through us, with the id and link the platform returned;
• analytics we read back from the platform for those posts and accounts.

Throughout this page we separate what you authored — your captions, media, schedules and settings — from what we cached from a platform’s API. A disconnect deletes the cached half and keeps your own work. Deleting your account deletes both.

What we cannot reach

• Anything already published on a social platform. A post we published for you lives on that platform. Delete it there — removing your ScheduleLater account does not take it down, and we would not want it to.
• Email we have already sent you. Our email provider keeps its own delivery records for messages that have gone out.
• Encrypted backups. Our hosting provider keeps database backups so an outage cannot lose your work. Deleted data ages out of those on their own retention schedule, and we never restore from a backup to bring an account back.

Questions

Write to privacy@schedulelater.com. What we collect and why is in our Privacy Policy.