Contents
Who can ask
Anyone whose personal data is held in Primeboxly Management can ask us to delete it, including:
- current and former team members and invited collaborators;
- people who applied to join Primeboxly through the public “Join” form;
- business contacts recorded by our team (for example a supplier or transport company contact).
There is no button in the Platform that deletes an account by itself: every request is handled by a Primeboxly administrator, as described below.
How to request deletion
- E-mail us at contact@primeboxly.com with the subject “Data deletion request” — or use the pre-filled request. Send it from the e-mail address registered on your account or used in your application, if you still can.
- Tell us who you are and what to delete:
- your full name;
- the e-mail address registered on your account or application;
- whether you are a team member, former team member, invited person, applicant or business contact;
- what you want deleted: your whole account and profile, your application, or specific items (for example your photo, phone number or CV).
- Do not send your password, a Meta access token, or identity documents. We will never ask for your password.
How we verify your request
- We check that the request matches an account, application or record we hold.
- We reply to the e-mail address registered in our records and ask you to confirm the request from it. This stops anyone else from deleting your data.
- If you no longer have access to that address, we may ask a few questions that only the account holder can answer from our records (for example your role and the approximate date you joined). If we cannot verify the request, we will tell you why.
- Requests made on someone else’s behalf need proof that the person authorised it.
What happens next
- Access ends. An administrator removes your account from the team in the Platform: you can no longer sign in, all your sessions end immediately, and any open invitation or password-reset link stops working.
- Accounts without history are erased. If nothing in the Platform points to your account (for example an invitation that was never used), the account is deleted entirely.
- Accounts with history are archived and cleaned. If your account is linked to business records — products, creatives, daily entries, decisions or the audit log — the account record is kept in an archived state with your name and e-mail, so those records keep their author. We then delete the optional profile details (photo, phone, location, job title), your market and team assignments, and other personal data we are not required to keep.
- Applications are deleted. For an applicant, we delete the application and its files (CV and photo).
- We confirm. We e-mail you when the request is complete, listing what was deleted and anything we had to keep, and why. We aim to complete verified requests within 30 days.
What can be deleted — and what may be kept
| Deleted on request | May be kept |
|---|---|
| Your ability to sign in, your sessions and pending invitation or reset links | An archived account record (name and e-mail) when business records point to it |
| Profile photo, phone number, location and job title | Products, creatives, daily entries, stock and sourcing records you worked on, with you as their author |
| Your market and team assignments | The audit log of actions taken in the Platform |
| Your job application, CV and photo | Messages that are part of team conversations, and earnings or finance records, where they are needed for Primeboxly’s accounts, legal obligations or a dispute |
Deleted data can remain in our database backups until they are replaced: daily backups are kept for about 14 days, and the ten most recent pre-update backups are kept. See the Privacy Policy for details.
Disconnecting Meta
Primeboxly Management does not use Facebook Login, and no personal Facebook account is connected to it. It reaches Primeboxly’s ad accounts through access tokens of system users in Primeboxly’s Meta Business portfolio. The connection can be removed at any time:
- In the Platform: the super administrator opens Settings → Integrations and chooses Disconnect on “Meta” or “Meta publishing app”. An ad account’s own token can be removed in Settings → Ad accounts by the super administrator or the media buyer assigned to that account. The stored, encrypted token is deleted at once, and from then on the Platform can no longer read or change anything in Meta.
- In Meta: an administrator of the Business portfolio can, in Meta Business Settings, revoke the system user’s tokens, remove the ad accounts or Pages assigned to it, or remove the app’s access. This stops access from Meta’s side.
Disconnecting stops future access. Advertising data already copied into the Platform is Primeboxly’s business data; it can be deleted on request by e-mail to contact@primeboxly.com.
If you are a Facebook or Instagram user who saw one of our ads: the Platform holds only aggregated advertising statistics, not information about you. For data held by Meta, use the settings and tools Meta provides.
Your campaigns are not deleted
A personal-data deletion request never deletes Primeboxly’s campaigns, ad sets, ads, ad accounts, Pages, pixels or creatives in Meta. These are business assets, managed in Meta Ads Manager by their owners, and deleting them is never part of handling a personal-data request.
Following up and contact
- To ask about the status of a request, reply in the same e-mail thread, or write to contact@primeboxly.com with the date of your request.
- If we refuse all or part of a request — for example because we must keep a record by law — we will tell you why. Depending on the law that applies to you, you may also complain to your data-protection authority.