Legal
Data Deletion Policy
Last updated: February 13, 2026
This Data Deletion Policy explains how Gems handles requests to delete user data collected through Meta platforms (Facebook and Instagram). It complements our Privacy Policy, which covers all other personal data we process.
1. How to Request Data Deletion
Send an email to [email protected] with the subject "Data Deletion Request", including your account ID or the email address associated with the app.
We will process your request within 30 days.
2. What Data We Delete
For Creators
Upon receiving an Instagram account deletion request, we permanently delete or anonymize the following data associated with your account:
- Personal profile information (name, email, profile picture)
- Access tokens and authentication data
- User activity logs and preferences
For Brands
Upon receiving a Meta business account deletion request, we permanently delete or anonymize the following data associated with your account:
- Ad account ID, Business Manager ID and Business Portfolio data
- Campaign, ad set, and ad identifiers
- Connected Facebook Pages and Instagram accounts
- Access tokens and authentication data
- User activity logs and preferences
Campaign performance data (views, reach, clicks, conversions, spend) may be retained as described in section 3 below.
3. Analytics Retention for Service Delivery
Gems provides performance reporting to brands as a core contractual service (e.g., impressions, reach, clicks, engagement metrics for content created during brand collaborations). Individual campaign performance data linked to specific creators are retained for the duration of the brand's contract plus 5 years thereafter to fulfill reporting obligations, enable historical analysis, and comply with commercial prescription periods (legal basis: contract execution, art. L110-4 French Commercial Code).
Only campaign performance metrics strictly necessary for contractual reporting and legal compliance are retained. No authentication credentials, access tokens, or direct contact data are kept beyond the standard deletion period.
We may retain certain data where required by applicable law, including accounting, tax, or fraud prevention obligations.
4. Deletion Timeline
- Immediate actions: access tokens are revoked, and direct personal data is deleted within 24 hours.
- Full deletion: all remaining user-specific data is deleted within 30 days. Media analytics are retained for the duration of the brand's contract plus 5 years thereafter to fulfill reporting obligations.
- Backups: data in backups is overwritten or deleted within 90 days.
5. Contact and Updates
For questions about this policy, contact [email protected].
This policy may be amended to reflect service changes or legal requirements. We will notify users of material changes by email or in-app notice.