Data deletion

Postbean lets you fully delete your account and everything tied to it. This covers the Data Deletion requirement that Meta and TikTok enforce during App Review, as well as the right to erasure under GDPR/CCPA.

Public page: /legal/data-deletion (linked from the footer and the Privacy Policy).

How to request deletion

1. Self-service (signed-in users): Settings → Profile → Delete account, confirming with your password.
2. By email: write to privacy@postbean.app with the subject “Data deletion request.” Ownership is verified and the deletion is completed within 30 days.

What gets deleted

Deleting your account permanently removes:

• Your user account and profile.
• Every workspace and organization you own.
• All connected social accounts, including their stored tokens (access_token, refresh_token, app_password).
• Every post (draft, scheduled, or published) inside Postbean.
• All associated media (images/videos and thumbnails), including the underlying storage files.

This does not remove content already published to your social accounts — that has to be deleted from each platform directly.

How it works under the hood

Because ownership references use nullOnDelete, a plain user deletion would otherwise leave orphaned workspaces behind with their social tokens still in the database. The account deletion flow instead:

1. Collects every workspace the user owns (directly, or via their own tenants).
2. Removes the storage files for each piece of media (foreign-key cascades alone don’t touch storage).
3. Deletes owned tenants and workspaces, which cascades to remove connected social accounts, posts, and media.
4. Deletes the user, which cascades to remove workspace memberships, remaining posts, and subscriptions.

Revoking access from the platform side

You can also revoke Postbean’s access directly from the social network itself (for example, Meta’s Business Integrations settings or a platform’s Connected apps page). That immediately stops any further publishing.

Backups

After deletion, encrypted backups may retain residual copies for a limited period, which are purged during the normal backup rotation cycle.