Legal

Data Deletion Policy

Last updated: May 2026

Effective date: May 2026

This policy explains how you can request deletion of your personal data from The Content Factory and how we handle deletion requests from connected social media platforms including Facebook, Instagram, LinkedIn, and TikTok.

1. Your Right to Data Deletion

Zenith Digital (Pty) Ltd respects your right to control your personal information. Under the Protection of Personal Information Act 4 of 2013 (POPIA) and applicable platform terms, you have the right to request deletion of your personal data held by The Content Factory at any time. This policy explains what data we hold, how to request deletion, what gets deleted, and what our process is for handling deletion requests from you and from connected social media platforms including Facebook, Instagram, LinkedIn, and TikTok.

2. What Data We Hold About You

The Content Factory holds the following categories of personal data: Account Data Your name, email address, display name, and company information provided at registration. Brand and Business Data Company profile information including your business description, industry, target audience, brand colours, and logo. Social Media Connection Data OAuth access tokens, refresh tokens, token expiry dates, and platform-specific user IDs for any social media accounts you have connected (Facebook, Instagram, LinkedIn, TikTok, Google). Content Data Social media posts, captions, and images generated through or uploaded to our platform. Content Strategy Data AI-generated content calendars, strategy profiles, and scheduling preferences. Lead Form Data Lead capture forms and associated configuration data created through our platform. Usage and Technical Data Activity logs, session data, and technical information collected during your use of the platform.

3. How to Request Data Deletion

You can request deletion of your data through any of the following methods: Method 1 — In-App Account Deletion Navigate to Settings within The Content Factory and select the account deletion option. This will initiate the deletion of your entire account and all associated data. Method 2 — Email Request Send an email to taahir@zenithdigi.co.za with the subject line "Data Deletion Request". Include your registered email address and specify whether you want full account deletion or deletion of specific data only. We will acknowledge your request within 5 business days and complete the deletion within 30 days. Method 3 — Facebook-Initiated Deletion If you connected your Facebook account and remove The Content Factory from your Facebook Apps and Websites settings, Facebook will automatically send us a deletion notification. We will delete your Facebook connection data within 30 days. See Section 5 for full details. We will send you an email confirmation once your deletion request has been processed.

4. What Gets Deleted

Upon a confirmed full account deletion request, we will permanently delete the following within 30 days: — Your account and all profile information — All social media OAuth tokens and connection data for Facebook, Instagram, LinkedIn, TikTok, and Google — All content generated through or uploaded to our platform — Your content calendar, strategy data, and scheduling preferences — All lead forms and associated configuration data — Your brand profile, company information, and branding assets — All usage history and activity logs associated with your account Deletion is permanent and cannot be reversed. We recommend exporting any content you wish to keep before requesting deletion.

5. Facebook and Instagram Data Deletion

The Content Factory supports Facebook's automated Data Deletion Callback system. This means that when you remove our app from your Facebook account or submit a data deletion request through Facebook, Facebook will automatically notify us and we will delete your data. How it works: 1. Go to your Facebook settings and navigate to Apps and Websites 2. Find The Content Factory and click Remove 3. Select "Request that [app name] delete all information about you" 4. Facebook sends an automated deletion request to our system 5. We delete all Facebook-related data associated with your account within 30 days 6. You will receive a confirmation code and a link to verify your deletion status Deletion Status Page You can check the status of your Facebook data deletion request at: https://content-factory.zenithdigi.co.za/api/facebook/data-deletion/status What gets deleted in a Facebook deletion request: — Your Facebook OAuth access token and refresh token — Your Facebook user ID stored in our system — Your Facebook connection status and token expiry data Note: This Facebook-initiated deletion removes your Facebook connection data from our system. If you want to delete your entire Content Factory account and all associated data, please use one of the full account deletion methods in Section 3. For Instagram: Instagram is part of the Meta platform. Removing Facebook app access also removes Instagram access. The same deletion process applies.

6. LinkedIn Data Deletion

To remove your LinkedIn connection data from The Content Factory: 1. Disconnect LinkedIn from within The Content Factory Settings page, or 2. Revoke app access directly in LinkedIn under Settings → Data Privacy → Third-party apps and connections, or 3. Submit a full deletion request via email to taahir@zenithdigi.co.za Upon receiving a LinkedIn deletion request, we will delete: — Your LinkedIn OAuth access token and refresh token — Your LinkedIn user ID and organisation data stored in our system — Your LinkedIn connection status LinkedIn member data collected during your use of our platform is handled in accordance with LinkedIn's API Terms of Use. We comply with LinkedIn's requirement to delete user data immediately upon request and to not retain LinkedIn member data beyond what is necessary to provide our services.

7. TikTok Data Deletion

To remove your TikTok connection data from The Content Factory: 1. Disconnect TikTok from within The Content Factory Settings page, or 2. Revoke app access directly in TikTok under Settings → Privacy → Apps and Websites, or 3. Submit a full deletion request via email to taahir@zenithdigi.co.za Upon receiving a TikTok deletion request, we will delete: — Your TikTok OAuth access token and refresh token — Your TikTok user ID stored in our system — Your TikTok connection status and token expiry data We comply with TikTok's developer terms regarding data deletion and do not retain TikTok user data beyond what is necessary to provide our publishing services.

8. Google Data Deletion

To remove your Google connection data from The Content Factory: 1. Disconnect Google from within The Content Factory Settings page, or 2. Revoke app access directly in your Google Account under Security → Third-party apps with account access, or 3. Submit a deletion request via email to taahir@zenithdigi.co.za Upon disconnection or deletion, we will delete your Google OAuth tokens and email address from our system. Any Google Sheets or Drive files created by The Content Factory on your behalf remain in your Google account and are under your control — we do not retain copies.

9. Data We May Retain After Deletion

In certain limited circumstances, we may retain some data after a deletion request for legal, regulatory, or security purposes: — Financial and transaction records, if applicable, for the period required by South African tax and financial laws — Audit logs related to data deletion requests themselves, retained for 3 years for legal compliance — Anonymised, aggregated data that cannot be used to identify you — Data we are required to retain by court order, legal process, or applicable law Where we retain data beyond a deletion request, we will inform you of the reason and the retention period where permitted by law.

10. Response Timeframes

We are committed to processing all data deletion requests promptly: — Acknowledgement of your request: within 5 business days — Completion of deletion: within 30 days of receiving your request — Email confirmation of completed deletion: sent upon completion — Facebook automated deletion requests: within 30 days of Facebook notification If we are unable to complete your request within 30 days, we will notify you with an explanation and an updated timeline.

11. Contact for Deletion Requests

To submit a data deletion request or for any questions about this policy: Zenith Digital (Pty) Ltd Johannesburg, Gauteng, South Africa, 1514 Email: taahir@zenithdigi.co.za Subject line: "Data Deletion Request" Website(s): https://zenithdigi.co.za | https://content-factory.zenithdigi.co.za/ Facebook Data Deletion Status: https://content-factory.zenithdigi.co.za/api/facebook/data-deletion/status You also have the right to lodge a complaint with the Information Regulator of South Africa: Website: https://inforegulator.org.za Email: inforeg@justice.gov.za