Palms StudioPalms Studio

Data Deletion

Effective June 12, 2026

This page explains how to request deletion of your personal information from Palms Studio. We honor deletion requests from three groups of people: the merchants who operate storefronts on our platform ("Tenants"), the customers who place orders on those storefronts, and anyone who connected a social media account (Facebook, Instagram, Pinterest, TikTok, Google) to a Tenant’s storefront so they could cross-post content.

1. What Gets Deleted

When you submit a verified deletion request, we permanently remove the personal information we hold about you. Depending on your role this includes:

  • Tenants — account profile, business details, storefront configuration, staff roster, uploaded media, social-platform access tokens, and all order history associated with the account.
  • Customers — name, email, phone number, delivery addresses, gift recipient details, order history, and any saved communication preferences (including SMS opt-in records).
  • Social-platform connections — the OAuth access and refresh tokens we stored when you authorized Palms Studio to publish to a Facebook Page, Instagram Business account, Pinterest board, TikTok account, or Google Business Profile, along with any metadata about posts we published on your behalf.

Some information may be retained in encrypted backups for up to 90 days after deletion before the backups themselves are recycled, and we may retain a minimal record of the deletion itself (date and request ID) to demonstrate compliance.

2. What May Be Retained for Legal Reasons

We may retain a limited subset of information when required to comply with tax, accounting, anti-fraud, or other legal obligations — for example, invoice records that tax authorities require us to keep for a number of years. Where we retain such information, we restrict access to it and use it only for the purpose that requires retention.

3. How to Submit a Deletion Request

If You Are a Tenant (Merchant)

Sign in to your Palms Studio dashboard, open Settings → Account, and use the "Delete account" action. We will confirm by email and process the deletion within 30 days. If you cannot access your account, email privacy@palmstudio.app from the address on file and we will verify your identity before proceeding.

If You Are a Customer of a Tenant

The Tenant whose storefront you ordered from is the controller of your order data. Please contact that Tenant directly first; their contact details are on the footer of their storefront. If they do not respond, or if you need help reaching them, email privacy@palmstudio.app with:

  • The storefront URL where you placed the order.
  • The email address or phone number you used to place the order.
  • Approximate date(s) of your order(s).

We will work with the Tenant to remove your information and confirm completion by email within 30 days.

If You Connected a Social Media Account

You can disconnect a social platform at any time from your Palms Studio dashboard: sign in, open Social → Connections, and click Disconnect next to the platform. Disconnecting immediately revokes the access and refresh tokens we hold and removes them from our database.

You can also revoke Palms Studio’s access from the platform’s side at any time:

Revoking from the platform’s side does not by itself delete the tokens we stored before you revoked. To also remove our stored copy, either disconnect from the Palms Studio dashboard as described above, or email privacy@palmstudio.app and we will delete the stored credentials within 30 days.

4. Facebook / Instagram User Data Deletion Callback

Meta requires every app that uses Facebook Login to publish a way for users to request deletion of the data the app received from Meta. If you removed Palms Studio from your Facebook account using the steps above and want us to delete the information we received from your Facebook or Instagram account, you can either:

  • Use the dashboard Disconnect action described in section 3, or
  • Email privacy@palmstudio.app from the address associated with your Facebook account. Include a sentence stating you are requesting deletion of data Palms Studio received from Facebook/Instagram. We will confirm completion by email within 30 days and provide a confirmation reference.

We do not store Facebook or Instagram passwords. We only store the OAuth access token, refresh token, Page ID, Instagram Business account ID, and any post IDs for content we published on your behalf — all of which are removed when you disconnect.

5. Timing

We complete verified deletion requests within 30 days of receipt. If a request will take longer for technical reasons, we will let you know and explain why.

6. Contact

All deletion requests and questions about this page can be sent to privacy@palmstudio.app.