Legal

Data deletion

Last updated: 2026-06-14 · Revision 2

This page explains how to delete your CommentMonsteraccount and every piece of personal data we hold about you. It serves as our Data Deletion Instructions URL for Meta’s Platform Terms.

1. Self-service deletion (recommended)

If you can still log in:

  1. Sign in at app.commentmonster.tech/login.
  2. Open Settings from the top-right menu.
  3. Scroll to Danger zone and click Delete account.
  4. Confirm by retyping your email and password. Accounts created via Google or Facebook only need email confirmation.

Your account is then soft-deleted. You have a 30-day grace period during which logging back in cancels the deletion. After day 30 we permanently purge your account, organization, connected channels, comments, drafted replies, voice profiles, sessions, and audit records.

2. If you can’t log in

If you signed up with Facebook and have since deleted your Facebook account, or you’ve otherwise lost access, email support@commentmonster.tech from the address tied to your CommentMonster account with the subject “Data deletion request”. Include:

  • The email address on file with us, and
  • Either the connected channel handle (YouTube, Facebook, Instagram, TikTok, or X) or the provider user ID you signed up with (so we can locate the account).

We acknowledge requests within 5 business days and complete deletion within 30 calendar days, in line with GDPR Article 17 and the CCPA.

3. What gets deleted

  • Your user record (name, email, hashed password, avatar URL).
  • Your organization and any teammates’ memberships in that org.
  • Connected channels and the OAuth tokens we stored for them (revoked on the platform side first).
  • All comments we polled, AI-drafted replies, voice profiles, and examples.
  • Server-side sessions, MFA secrets, recovery codes, and audit log entries that reference you.
  • Notification preferences, Telegram links, and stored phone numbers.

Some records may persist briefly in encrypted backups (rotated within 35 days) and in invoice / tax records that we are legally required to retain.

4. Revoking platform access

Account deletion automatically revokes the OAuth tokens we hold. You can also revoke CommentMonster’s access independently from the platform side:

5. Contact

Data Protection Contact (Comment Monster Inc.): support@commentmonster.tech