Your rights
You may request deletion of personal data associated with your Marshi account, and ask us to remove connected Meta or Instagram integration data we hold for your workspace, subject to applicable law and legitimate business needs (for example billing records or security logs where retention is required).
Disconnecting Instagram or Facebook
When you disconnect Meta or Instagram from Marshi (including revoking the app in Meta or Instagram settings), publishing access tokens stored for that connection are removed or invalidated. That stops Marshi from accessing your account on your behalf. Past content you created in Marshi (for example drafted or published posts) is not automatically erased; see below if you need account-wide deletion.
What we may store for connected Instagram accounts
- Instagram professional account identifiers (for example Instagram user id or username as returned by Meta).
- Encrypted OAuth tokens used only to publish or sync on your behalf.
- Publishing metadata such as media ids, permalinks, or status from platforms when you use Content features.
Marshi does not sell Meta Platform Data. We use connected data only to deliver the product you signed up for.
How to request deletion
Email support@marshi.ai from your account owner email. Describe whether you want (a) removal of connected Meta/Instagram integration data, (b) deletion of your Marshi user profile, or (c) workspace closure. We will confirm identity and scope before processing.
What account deletion covers
- Your user profile, sign-in identity, and product activity history are permanently deleted.
- Workspaces where you are the only member are deleted in full, including projects, brand data, generated content, and uploaded files.
- In workspaces you share with other members, your membership is removed and content you created stays with the workspace in de-identified form (it is no longer linked to you).
- We retain what applicable law requires or permits: invoicing and billing records, and a minimal audit entry documenting that the deletion was carried out.
What happens next
We aim to acknowledge requests within a few business days. We complete the request within one month of receiving it (GDPR Article 12(3)). If the request is complex, or you have made many, we can extend that by two further months, and we tell you within the first month why. Disconnection and token removal for Instagram Business Login can take effect immediately when you revoke access in Meta or when we process a verified request. For account deletion we first verify your identity, then suspend the account during a short grace period (so an unauthorized request can be reversed), and then carry out the permanent deletion described above. Active paid subscriptions must be cancelled before workspace deletion completes. The rights themselves are set out in the Privacy Policy.
