Data Deletion

This page explains how to disconnect an advertising-platform integration, delete your SourceLoop account, or request deletion of any personal data SourceLoop holds about you, including data captured on behalf of a SourceLoop customer. For the full treatment of how we collect, use, and retain data, see our Privacy Policy.

If you have a SourceLoop account

Disconnect a single ad-platform integration

Open SourceLoop → Setup → Ad Platforms, click the integration you want to remove, then click Disconnect. This action:

1. immediately calls the platform's OAuth revoke endpoint so the platform invalidates the grant on its side;
2. hard-deletes our stored OAuth tokens from Supabase Vault;
3. schedules deletion of all stored campaign, ad-group, ad, keyword, and historical performance data for that integration — completed within thirty (30) days, and in practice usually within minutes.

Leads you have already captured in SourceLoop are part of your own CRM history and remain in your account, so disconnecting an ad platform will not erase the contacts attributed to it.

Delete your entire SourceLoop account

To delete your entire SourceLoop account (all websites, integrations, captured leads, and audit logs), email [email protected] from the email address on your account. We will:

1. confirm receipt within two (2) business days;
2. verify that the request is coming from an authorised account owner;
3. complete the deletion within thirty (30) days of verification;
4. send you a written confirmation when the deletion is complete.

If you do not have a SourceLoop account

You may still have personal data in SourceLoop if you interacted with a SourceLoop customer's marketing — for example, you submitted a lead-gen form or visited a website running our first-party tracking snippet. Because SourceLoop processes that data on behalf of the customer (as their data processor), the customer is the data controller and is primarily responsible for responding to your request. SourceLoop will support and execute the deletion.

Data from Meta Lead Ads, LinkedIn Lead Gen Forms, TikTok Lead Generation, and similar

If you submitted a lead form on an ad campaign run by a SourceLoop customer (for example a Meta Lead Ad on Facebook or Instagram, a LinkedIn Lead Gen Form, or a TikTok Lead Generation Form), your contact details may be in SourceLoop as part of that customer's lead records. To request deletion:

1. email [email protected];
2. include the email address or phone number you submitted on the form, and, if you know it, the brand or company that ran the ad;
3. we will locate and delete any matching records within thirty (30) days, and notify the customer of the deletion so their copy is also removed.

Data from a website that uses the SourceLoop tracking snippet

If you visited a website that uses SourceLoop, the snippet sets first-party cookies and local-storage entries on that website's domain to remember an anonymous visitor identifier and any marketing-attribution parameters. You can:

1. clear cookies and local storage for that website in your browser settings to remove the identifier from your device;
2. email [email protected] to request deletion of any server-side records associated with your identifier — please include the website domain and, where possible, the email or phone number you submitted on that site;
3. contact the operator of the website directly, since they are the data controller for that data.

Timing and expedited requests

The deletion timelines above (thirty (30) days for full account and lead-record deletion) are our default commitments. If you require expedited deletion for legal or regulatory reasons, email [email protected] with a brief explanation and we will complete the deletion within five (5) business days of verification.

Encrypted backups are part of our standard infrastructure and are retained on a rolling thirty-five (35) day cycle. Personal data that has been deleted from the live system is purged from backups as those backups age out within that window; we do not restore personal data from backups except where required to recover from a verified incident.

What SourceLoop cannot delete on your behalf

When a SourceLoop customer enables server-side conversion uploads, SourceLoop transmits hashed identifiers (typically SHA-256-hashed email and phone) and conversion events to the destination advertising platform — for example, Google Ads, Meta, LinkedIn, TikTok, Microsoft Advertising, Pinterest, Snap, Reddit, or X. Once that data is in the destination platform, deletion is governed by that platform's own retention and deletion controls. To delete that data, use the destination platform's own data-rights process:

1. Google Account permissions and Google Ads data request;
2. Meta “Your Facebook Information”;
3. LinkedIn data-rights request;
4. TikTok privacy request;
5. Microsoft privacy dashboard;
6. Pinterest, Snap, Reddit, and X each provide a privacy or data-rights request form linked from their respective help centres.

Records SourceLoop is required to retain

After we have actioned a deletion request we may retain a minimal set of records as required by law or for the establishment, exercise, or defence of legal claims, including:

1. billing and tax records for the period required by applicable tax law (typically seven years);
2. a record of the deletion request itself, including the email used and the date and scope of deletion, so that we can prove compliance with data-protection law;
3. aggregated, de-identified statistics that cannot reasonably be linked back to any individual.

Confirmation and escalation

We will send you a written confirmation when your deletion is complete. If you do not receive a response within five (5) business days, or are not satisfied with how we have handled your request, please re-send to [email protected] with the subject line "Escalation: Data Deletion".

Residents of the EU, EEA, or UK also have the right to lodge a complaint with their local supervisory authority. Residents of California may contact the California Attorney General's office.

Contact

All deletion requests and questions about this page should go to [email protected].