Data Deletion

Email [email protected] with the subject line Data Deletion Request. Include the email address used for Lucra, your workspace or organization name, whether you are a brand user or creator, and the account, integration, submission, or workspace data you want deleted.

If your request involves a workspace, brand account, creator account, Google connection, Meta connection, TikTok connection, Instagram connection, Shopify store, AppsFlyer connection, Stripe connection, payment account, payout account, or another third-party integration, include enough detail for us to verify that you are authorized to make the request.

We may ask for additional information to verify your identity, connected account ownership, workspace authority, or right to make the request. We may refuse or limit a deletion request if we cannot verify it, if it would delete information belonging to another user or workspace, or if retention is permitted or required by law, contract, payment rules, tax rules, fraud prevention, security, dispute, or platform obligations.

After verification, we will delete or de-identify personal information and connected platform data that Lucra is not required or permitted to keep. This may include profile information, invite records, connected social metadata, creator social content metadata, uploaded creative files, thumbnails, transcripts, captions, integration tokens, source filenames, and inactive workspace records.

If you request deletion of a connected Google, Meta, TikTok, Instagram, Shopify, AppsFlyer, Stripe, payment, or payout integration, we will remove Lucra-stored access credentials and stop using that integration where technically possible, subject to retention obligations and any actions already completed at the third-party platform.

Google Sign-In and Google Ads are separate connections. Removing a Google Ads integration does not delete your Lucra login, and removing a Google Sign-In method does not by itself disconnect a separately authorized Google Ads integration.

A workspace owner or administrator can disconnect Google Ads from Settings, Integrations in Lucra. Lucra will attempt to revoke the Google OAuth authorization, permanently delete its stored Google Ads access and refresh tokens, and stop future Google Ads API access. You can also revoke Lucra directly from your Google Account's third-party connections at myaccount.google.com/connections.

To delete Google profile information received for Google Sign-In, or historical Google Ads data held by Lucra, email [email protected] with the subject line Data Deletion Request. After verification, we delete or de-identify applicable Google account identifiers, name, email, profile image, advertiser and manager account details, campaign and ad records, settings, creative references, and reporting metrics that we are not required or permitted to retain. Deletion from Lucra does not delete records controlled by Google or cancel a Google Ads account or campaign.

Disconnecting Meta, TikTok, Instagram, Shopify, AppsFlyer, or another integration stops new Lucra access where the provider supports it and removes locally stored credentials. You may also need to revoke Lucra in that provider's account settings. AppsFlyer API credentials are controlled by the connected AppsFlyer account and should be rotated or revoked there after disconnection when appropriate.

Lucra receives and processes Shopify's required customer-data access, customer-redaction, and shop-redaction requests. Verified requests are handled within the period required by Shopify unless Lucra is legally required to retain specific records. Stripe, payment processors, and payout providers may retain their own payment, identity, tax, bank, dispute, and compliance records under their policies and legal obligations.

A verified deletion request also covers Lucra's PostHog analytics identity and identifiable analytics properties. We will delete or de-identify applicable analytics data that we control, subject to the retention limits below. Aggregated statistics that no longer identify you may remain.

Deleting a Lucra record does not automatically stop or delete ads, posts, pixels, apps, ad account data, store or order data, attribution data, app store data, payment data, or other records controlled by Google, Meta, TikTok, Instagram, Shopify, AppsFlyer, Stripe, payment processors, app stores, or other third-party services. You may need to manage or delete that data directly inside those services.

Approved creator content may already have been uploaded to ad platforms, included in campaigns, used for reporting, tied to payout records, or copied into provider systems. We will delete or de-identify Lucra-held copies where required, but we may retain records needed to document approvals, rights, campaign history, spend, earnings, disputes, taxes, fraud reviews, or legal compliance.

We may retain information where needed for legal, tax, accounting, audit, security, fraud prevention, platform compliance, dispute, chargeback, payout, billing, or enforcement purposes. Retained records may include transaction logs, payout history, invoice records, campaign audit events, provider identifiers, review decisions, approval history, usage rights history, and security logs.

We may also keep aggregated, anonymized, de-identified, or otherwise privacy-protective information that no longer identifies a specific person, account, workspace, or connected platform user.

If we receive a valid platform data deletion or access revocation request from Google, Meta, TikTok, Instagram, Shopify, AppsFlyer, or another connected provider, we will review the request and delete or de-identify applicable platform data as required by that provider's terms and applicable law, unless retention is permitted or required.

You can also revoke Lucra access from the applicable third-party platform settings. Revoking access may stop future syncing, but it may not remove historical records that Lucra is permitted or required to retain.

We aim to respond to deletion requests within 30 days. Some requests may take longer if verification is incomplete, the request is complex, data is stored across backups or provider systems, or retention is required for legal, payment, dispute, audit, platform, or security reasons.

Where a third-party platform requires deletion within a specific period and the request is valid, we will work to meet that platform requirement unless an exception applies.

Questions about data deletion can be sent to [email protected].