User Data Deletion Instructions

You can ask us to delete the personal data we hold about you at any time. This includes your account information, any data we have cached from the accounts you have connected, and any workflow or automation records associated with your account.

Connected accounts covered by a deletion request include:

• —Google: Gmail messages and metadata, Calendar events, Drive files, and Contacts
• —Meta (Facebook and Instagram): lead ad submissions, Page and Instagram Direct messages, published posts and their comments, ad performance metrics, and any campaign or audience data we cached while managing your ad account
• —Meta (WhatsApp Business): the conversations on your WhatsApp Business number and their history, the display names and phone numbers of the people who messaged you, and the account details we cached — phone numbers, business profile and message templates
• —Meta (product catalogs and Business Manager): the catalog and product item data we cached, and the business portfolio data we cached — the Pages, Instagram accounts, WhatsApp Business accounts, ad accounts, catalogs, pixels and people your Business Manager holds
• —Xero: contacts, invoices, bills, payments and bank transactions, financial reports, and payroll records including pay rates, leave and timesheets
• —Execution records and produced files: the history of every automation run on your account — including the summaries of what went in and came out, which can carry content from the connected accounts above — and any file an automation produced or delivered. These are the longest-lived records the Service holds, and a deletion request reaches them
• —The stored OAuth tokens for every one of those connections

If we operate your deployment — which is the normal arrangement, and is what you have unless you have been told otherwise in writing — send the request to us and we carry it out. If you run the Service in your own environment under an enterprise arrangement, the data is on your infrastructure and the deletion is yours to execute; write to us anyway and we will delete anything held on our side, such as your account and billing records, and tell you what to run on yours.

To request deletion of your data, send an email to hello@hmn.plus with the subject line "Data Deletion Request".

So we can locate and verify your account, please include:

• —The email address associated with your HMN.Plus account
• —Your name, if different from the name on the account
• —Confirmation that you want your personal data permanently deleted

We may contact you to verify your identity before processing the request. This protects you against someone else requesting deletion of your data without your authorisation.

• —Within 30 days of receiving and verifying your request, we will permanently delete your personal data from our systems.
• —This includes your account data and any data cached from connected services. Where data has been shared with sub-processors to operate the Service, we will request its deletion in line with our agreements with them.
• —Once deletion is complete, we will send you a confirmation email to the address you contacted us from.

Ordinarily the Service keeps execution history for years by default — see section 11 of the Privacy Policy — but a deletion request overrides those defaults rather than waiting them out. What survives one is narrower: we may retain a limited amount of information where we are legally required to do so — for example, billing and tax records — or where necessary to resolve disputes, prevent fraud, or enforce our agreements. Any such data is kept only for as long as the law requires and is then deleted. Aggregated, anonymised data that can no longer be linked to you may be retained.

You can disconnect any third-party integration at any time and revoke our access directly through the provider's own security settings:

• —Google — your Google account permissions
• —Facebook — your Apps and Websites settings
• —Instagram — Settings, then Apps and websites (how to)
• —WhatsApp Business, product catalogs and Business Manager — in the business portfolio you connected: Business settings, then Apps, then remove HMN.Plus (how to). Removing the app there withdraws access to every asset the portfolio holds — your WhatsApp Business account and its templates, your catalogs, and the portfolio itself
• —Xero — in the organisation you connected: the organisation name, then Settings, then Connected apps

Revoking access stops further processing but does not, on its own, delete data we already hold — for that, please send a deletion request as described above. Removing the HMN.Plus app from your Facebook or Instagram settings is not itself a deletion request; email us as described above and we will delete the data within 30 days.

What lives in your own accounts stays yours and is not ours to remove: campaigns, ads and custom audiences in your Meta ad account, posts already published, catalogs and product items in Commerce Manager, message templates and messages already delivered on WhatsApp, the assets and people in your Business Manager, and records already written to your Xero organisation all remain in place after we delete our copy. Delete those from the account itself.