DATA RIGHTS
Data Deletion
DeeCi uses token-based authentication with no stored passwords. Deletion is instantaneous and complete at the database level.
How Our Auth Works
DeeCi does not use passwords. Access is granted through cryptographic DC- prefix tokens, hashed with SHA-256 and stored as one-way hashes. There is no password to leak, no credential to phish. Token revocation is instant and irreversible at the database level.
What gets deleted
Your DC- token hash and all token metadata. Tenant record and membership. OAuth tokens for connected platforms (encrypted, per-tenant key). Content queue history and scheduled posts. Engagement metrics and analytics. All intelligence outputs generated for your account.
What we never stored
Passwords (we use token auth only). Plaintext tokens (only SHA-256 hashes). Browser session data (sovereign runtime is zero-persistence). Screen content or recordings. Biometric data beyond the authentication gate.
How deletion works
Token is set to "revoked" status — instant, database-level. Tenant record set to "suspended" — all auth paths blocked. Associated data cascade-deleted from active tables. Per-tenant encryption keys destroyed — rendering any residual encrypted data permanently unreadable.
Timeline
Token revocation: immediate. Active data purge: within 24 hours. Encrypted backup purge: within 90 days. Anonymized aggregate statistics (cannot be linked to you): retained indefinitely.
Killswitch
DeeCi maintains an administrative killswitch that can instantly revoke all active tokens and suspend associated tenant records at the database level. This is used in emergency scenarios and at the end of evaluation periods. Once engaged, all sessions terminate immediately and no further access is possible without re-issuance.
Request Deletion
Email privacy@thedeeci.com from the email address associated with your token. Include “Data Deletion” in the subject. Upon verification, your token is revoked, your tenant record suspended, and all associated data purged from active systems within 24 hours. Encrypted backups are purged within 90 days.
Connected Platforms (Facebook, Instagram)
Revoking DeeCi from within a connected platform (e.g. Facebook Settings → Apps and Websites → Remove) triggers automatic deletion of stored OAuth tokens and associated engagement data within 48 hours. Platform-side content you published remains on those platforms per their own policies.