Privacy & Security

Data Deletion Instructions

PingSurf respects your right to data privacy and gives you full control over your data. You can permanently delete your business data from our servers at any time directly from the app.

Option 1: Delete Inside PingSurf App (Recommended)

This is the fastest way and immediately stops all automation.

Go to app.pingsurf.com/setup.html?client_id=YOUR_ID (starts with cl_) or open PingSurf from your bookmarks. You may need to log in to Facebook.
Scroll down to Danger Zone.
Click Unsubscribe & Delete Account and confirm Yes, Delete Everything.

What happens instantly:

Your Razorpay subscription is cancelled automatically.
All webhooks are unsubscribed and AI reply / publishing stops immediately.
We permanently wipe your business data from our databases.
Webhook payloads stored temporarily for deduplication cache are deleted immediately after a post is published.

🗑️ Deleted Forever page_access_token, user_access_token, admin_whatsapp_number, knowledge files, RAG embeddings, posts_used, ai_replies_used, plan, razorpay ids, page_name, ig_username, created_at, last_login

🧹 Also Deleted All documents in client_knowledge collection (your uploaded knowledge base, chunks, embeddings). No recovery possible.

Webhook Dedup Cache Policy: Webhook data is stored strictly as a temporary deduplication cache. Aside from being deleted immediately upon post publication, any remaining webhook cache data is automatically purged daily at 12:00 AM IST.

What we retain and why:

To prevent free-trial abuse and to comply with Meta's requirement to identify returning users, we retain only 4 identity fields in a locked, inactive state:

client_id
facebook_page_id / page_id
facebook_user_id / fb_user_id
instagram_business_account_id / ig_id

Why retain? We set is_active=False, is_banned=True so you cannot claim a new free trial with the same Page. This is a legitimate fraud-prevention interest under GDPR Art. 6(1)(f). All tokens and content are gone. If you want even these 4 fields erased, use Option 3 below for full erasure.

Note: Once you confirm, this action cannot be undone. You will have to set everything up from scratch if you return.

Option 2: Remove via Facebook - Apps and Websites

If you remove PingSurf from Facebook directly, Meta sends us a deauthorization callback. We handle it the same as Option 1 - full wipe except the 4 identity fields.

Go to Facebook: Settings & Privacy > Settings > Apps and Websites.
Find PingSurf and click Remove.
Confirm removal.

Automated publishing and auto-replies stop instantly. Our endpoint /data-deletion-callback deletes your data and returns a confirmation ID as required by Meta.

Option 3: Request Complete Erasure (Including Identity Fields)

If you want us to delete even the 4 retained identity fields (full GDPR erasure), email us:

Send an email to [email protected] from the email linked to your Facebook Page.
Subject: Full Data Deletion Request - [Your Page ID/ Whatsapp Phone Number]
Body: Include your whatsapp_number and Page name/ Page ID.

We will manually purge the remaining document from subscriptions and confirm within 7 business days. After full erasure, you will be eligible for a new free trial.