legal

Data Deletion

Last updated: 4 May 2026

1. Your right to delete

You can ask Praxa to delete the data we hold about you and your organization at any time. This page explains what gets deleted, what cannot be deleted (because it lives on someone else’s system), how long it takes, and how the platform-initiated deletion flows from Meta, Google, and Shopify work.

For the legal framing, see our Privacy Policy and Terms of Service.

2. How to request deletion

Email contact@getpraxa.com from the address associated with your Praxa account. Include:

  • The email address(es) used to sign in to Praxa, or your Shopify shop domain (e.g. your-store.myshopify.com).
  • Whether you want to delete everything (full account closure) or only specific data (e.g. just the Meta connection, just the WhatsApp phone number).
  • Optional: a reason. We don’t require one and we won’t push back on the request.

We confirm the request within 2 business days and complete the deletion within 30 days, in line with GDPR Article 17 timelines. Audit-log entries we’re legally required to retain (for tax or fraud prevention) are kept up to 12 months and then permanently destroyed.

If you have a Praxa account, you can also self-serve from Settings → Account → Delete account. That triggers the same flow.

3. What we delete from Praxa

On a full account-deletion request we permanently remove:

  • Your account record, profile, organization membership, and team invitations.
  • All OAuth tokens stored in Supabase Vault for connected services (Shopify, Meta, Google Ads). Once these are deleted, Praxa can no longer act on those accounts.
  • All data ingested from those services on your behalf — Shopify catalog cache, Meta campaign metadata, Google Ads campaign metadata, performance metrics we mirrored.
  • All AI-generated content created for your projects: ad copy, creative briefs, image / video assets stored in Cloudflare R2.
  • Your conversation history with Aria and the agent’s persistent memory entries about your projects.
  • Approval records, alert history, and notification preferences, including any WhatsApp phone number on file.
  • Waitlist signups, if you also asked us to remove that record.

4. What we cannot delete

Some data lives on systems Praxa does not own. Deleting your Praxa account does not automatically remove that data — you have to request deletion directly from each platform.

  • Shopify: products, orders, customers, and the merchant store itself live in your Shopify admin. To delete data held by Shopify, contact Shopify Support or close your Shopify store. If you simply uninstall Praxa, Shopify automatically calls our shop/redactwebhook 48 hours later and we destroy any cached copy on our side per Shopify’s compliance contract.
  • Meta (Facebook / Instagram):ad campaigns we created in your Meta Ad Account remain in Meta’s system after deletion of your Praxa account. To delete or pause those campaigns, sign into business.facebook.com and manage them directly. To remove Praxa’s permission to act on your account, go to Facebook → Settings → Business Integrations and revoke Praxa’s access. Meta’s own data-deletion instructions are at facebook.com/help/contact/784491318687824.
  • Google Ads: campaigns we created in your Google Ads account remain after Praxa account deletion. Manage them at ads.google.com. To revoke Praxa’s OAuth access, visit myaccount.google.com/permissions.
  • Email and infrastructure providers: records of support emails or transactional notifications may persist in our email-provider logs for up to 30 days. Backup snapshots of the Praxa database may retain a copy for up to 35 days, after which they are overwritten.

5. Meta-initiated deletion (Data Deletion Callback)

When a Meta user removes Praxa from their Business Integrations page, Meta sends a signed deletion-request callback to Praxa. On receipt, we begin deleting Meta-related data within 24 hours and complete the deletion within 30 days, returning a confirmation code to Meta as required by Meta’s Platform Terms.

If you’d like a status update on a Meta-initiated deletion, email contact@getpraxa.com with the deletion confirmation code Meta provided in the confirmation screen.

6. Shopify-initiated deletion (mandatory webhooks)

Shopify requires every app to honor three GDPR / privacy webhooks. Praxa implements all three:

  • customers/data_request— when a merchant’s customer requests their data, we surface any data held about that customer (typically none, since Praxa rarely processes individual customer PII).
  • customers/redact— when Shopify confirms that a customer’s data must be erased, we erase it within 30 days.
  • shop/redact — 48 hours after a merchant uninstalls Praxa, Shopify fires this webhook and we erase the entire shop record, OAuth token, catalog cache, and all derived data within the response window mandated by Shopify.

7. Confirmation

Once deletion is complete you’ll receive a confirmation email summarizing what was deleted and what (if anything) was retained for legal compliance, with the date you can expect any retained data to be destroyed.

If you don’t hear back within 2 business days, please resend your request — emails occasionally get caught in spam filters.

8. Questions

Questions about this process or escalations: contact@getpraxa.com.