Data Deletion Instructions

Last Updated: May 18, 2026

Cymatic ("we", "us", or "our") is committed to your privacy and your right to control your personal data. This page explains how to disconnect third-party social media accounts, delete your Cymatic account, and understand exactly what data is removed and when.

Cymatic allows you to connect your YouTube, Facebook, Instagram, and TikTok accounts to publish content directly from the app. You can also connect external data sources (such as Google Drive) for data ingestion. If you would like to remove these connections and delete all associated data, follow the instructions below.

1. Disconnect Social Media Accounts via Cymatic

The fastest way to disconnect a social media account and delete all associated data is through the Cymatic app itself:

1. Open the Cymatic app on your mobile device
2. Navigate to Settings from the main menu
3. Tap Social Media to view your connected accounts
4. Tap the account you want to disconnect (YouTube, Facebook, Instagram, or TikTok)
5. Tap Disconnect and confirm when prompted

When you disconnect an account through Cymatic, the following actions occur immediately:

• The OAuth access token and refresh token are revoked with the platform provider
• All encrypted token data is permanently deleted from our database (Google Cloud Firestore)
• Your connected account name, profile picture URL, and account metadata are removed
• Any page selection preferences or publishing settings are deleted
• The disconnection is logged for compliance and audit purposes

There is no retention period for disconnected account data. Deletion is immediate and irreversible.

2. Disconnect via Facebook Settings

You can also revoke Cymatic's access to your Facebook or Instagram account directly through Facebook:

1. Log in to your Facebook account
2. Go to Settings & Privacy > Settings
3. Select Apps and Websites from the left menu
4. Find Cymatic in the list of active apps
5. Click Remove to revoke access

This immediately revokes our access to your Facebook and Instagram accounts. If you connected Instagram through Facebook Login, removing Cymatic from Facebook also revokes Instagram access.

Note: Removing Cymatic from Facebook does not automatically delete data stored on our servers. To ensure complete data deletion, we recommend also disconnecting through the Cymatic app (Option 1 above) or contacting us directly.

3. Disconnect via YouTube / Google Settings

You can revoke Cymatic's access to your YouTube account through Google's account settings:

1. Go to myaccount.google.com/permissions
2. Sign in to your Google account if prompted
3. Find Cymatic in the list of third-party apps with access
4. Click Remove Access and confirm

This revokes our OAuth tokens for your YouTube channel. As with Facebook, we recommend also disconnecting through the Cymatic app to ensure all stored data is removed from our servers.

4. Disconnect via TikTok Settings

To revoke Cymatic's access to your TikTok account:

1. Open the TikTok app
2. Go to Settings and Privacy > Security > Manage app permissions
3. Find Cymatic and tap Remove

5. Disconnect Google Drive Data Sources

If you connected a Google Drive folder for data ingestion, you can disconnect it through the Cymatic app:

1. Open the Cymatic app
2. Navigate to your group settings
3. Tap the connected Drive folder you want to disconnect
4. Tap Disconnect and confirm when prompted

When you disconnect a Drive data source:

• No further files are imported from the disconnected folder
• The Drive source record (folder ID, folder name, sync metadata) is deleted from our database
• Previously imported files remain in cloud storage until you or a Group Admin manually deletes them, or the group is deleted
• File sync records (Drive file IDs, file names, sync timestamps) are retained as part of the group's data

To fully remove all imported files, a Group Admin can delete individual files, or the data is permanently deleted when the group is deleted.

6. What Data Is Deleted

When you disconnect a social media account (via any method above), we permanently delete the following data from our systems:

Authentication Data

• OAuth 2.0 access tokens (encrypted with AES-256-GCM)
• OAuth 2.0 refresh tokens (encrypted with AES-256-GCM)
• Token encryption keys derived via PBKDF2
• Token expiration timestamps and metadata

Account Profile Data

• Connected account display name
• Account/channel/page ID
• Profile picture URL
• Account type and platform identifier

Publishing Configuration

• Selected Facebook Page or Instagram account preferences
• Default publishing privacy settings
• Any scheduled or draft publications linked to the disconnected account

What Is NOT Deleted

• Content already published to your social media accounts remains on those platforms and is subject to their respective data policies
• Publication history records (titles, timestamps, and status) are retained as part of your group's activity log but no longer contain account identifiers
• Original files in your Google Drive are never modified or deleted by Cymatic — only the copies stored in our cloud storage are affected
• Aggregated analytics data that cannot be traced back to your individual account

7. Cymatic Account Deletion

To delete your entire Cymatic account and all associated personal data:

1. Open the Cymatic app
2. Navigate to Settings > Profile
3. Scroll to the bottom of your profile page
4. Tap Export My Data if you wish to download a copy of your data before deletion (optional)
5. Tap Delete Account
6. Choose to leave a specific group or select Delete All to remove yourself from all groups
7. Confirm your decision when prompted

Group Owner Requirements

If you are a Group Owner, you must complete one of the following before deleting your account:

• Transfer ownership: Assign another group member as the new Group Owner. The new owner must accept the group by creating a new subscription with updated payment details. Any remaining subscription time will be honored.
• Delete your group: Delete the group entirely, which removes all group data including chat messages, events, media, and connected accounts.

Data Removed on Account Deletion

When your account is deleted, the following data is permanently removed:

• Your user profile (name, email, profile picture, date of birth)
• Authentication credentials and session data
• All connected social media account data (tokens, profiles, preferences)
• Your personal app settings and notification preferences
• Locally cached data on your device (encrypted Hive database)

Data Removed on Group Deletion

When a group is deleted (by the Group Owner), the following additional data is permanently removed:

• All imported data files from cloud storage
• All Drive sync records and data source connection records
• All series enrollment records associated with the group

8. Data Deletion Timeline

• Social media account data: Deleted immediately upon disconnection. No retention period.
• Cymatic account data: Account is deactivated immediately upon deletion request. All personal data is permanently purged within 30 days.
• Group data: If a group is deleted, all associated group content (chat messages, events, media files, connected accounts) is permanently deleted within 30 days.
• Drive data source records: Deleted immediately when the data source is disconnected. Imported files remain until manually deleted or the group is deleted.
• Backup copies: Any backup copies of deleted data are purged within 30 days of the deletion request.
• Anonymized analytics: Aggregated, anonymized usage data that cannot be traced to your account may be retained indefinitely for service improvement purposes.

9. Data Export

Before deleting your account, you have the right to request a copy of your personal data. You can do this through:

• In-app export: Settings > Profile > Export My Data. This generates a downloadable file containing your profile information, group memberships, and activity history.
• Email request: Contact us at cymatic@apex-ai.net to request a data export. We will provide your data within 30 days in a portable, machine-readable format.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (as described on this page)
• Right to Restrict Processing: Request that we limit how we process your data
• Right to Data Portability: Receive your data in a portable, machine-readable format
• Right to Object: Object to processing of your data based on legitimate interests

For California residents, additional rights under CCPA/CPRA are described in our Privacy Policy.

11. Contact Us

If you have questions about data deletion, need assistance with account removal, or wish to exercise any of your data rights, contact us:

Email: cymatic@apex-ai.net
Address: Cymatic, Contra Costa County, California

We respond to all data deletion and privacy requests within 30 days.

For additional information about how we collect, use, and protect your data, please refer to our Privacy Policy and Terms of Service.