Data deletion
How to delete the data Flung holds about you: a connected social account, Flung's access on each platform, or a whole workspace and the people in it. Each way says what it removes and what stays.
Last updated: 2026-10-30
TL;DR
| Question | Answer |
|---|---|
| I connected a social account through an app that uses Flung. How do I remove it? | Disconnect it in that app, or remove Flung in the platform's own settings. Either ends Flung's access at once. |
| Does disconnecting delete everything? | It deletes the tokens, so Flung can no longer post or read for the account. The account's id and name stay with the workspace's past posts until the account or the workspace is deleted. |
| How do I have the whole account deleted? | Write to legal@buungroup.com (opens in a new tab) with the platform and the account's username. We answer within 30 days. |
| What happens when I remove Flung on Facebook, Instagram or Threads? | Meta tells Flung. Removing the app deletes the tokens; asking Meta to delete your data deletes the accounts too, and gives you a confirmation code. |
| How do I delete my Flung sign-in or a workspace? | Write to legal@buungroup.com (opens in a new tab) from the address you sign in with. We answer within 30 days. |
| Who runs Flung? | Buun Group Pty Ltd, ABN 75 687 193 675, Spring Mountain, QLD 4300, Australia. |
Disconnect a social account
Disconnecting stops Flung posting to an account and deletes its tokens. There are three ways, and each does the same.
| Way | How |
|---|---|
| In the app you connected it from | Most apps that use Flung show the connect panel, with Disconnect beside each account. It asks you to confirm, then the account leaves the list. |
| With the API | A workspace calls DELETE /v1/accounts/{id} with its API key, or with a connect token from its own page. The answer is the account, now disconnected. See Disconnect an account. |
| By asking us | Write to legal@buungroup.com (opens in a new tab) with the platform and the account's username. |
What disconnecting removes and keeps:
| Data | What happens |
|---|---|
| The access token and refresh token | Deleted at once. Flung can no longer post to the account or read from it. |
| Posts scheduled to the account | Not sent to it, because there is no token to send with. |
| The account record: its id and username on the platform, its picture address, and its status | Kept, marked disconnected, so the workspace's past posts still show where they went. Other encrypted secrets a few platforms need stay with it, unusable without the tokens. |
| Past posts and their results | Kept until the workspace deletes the post. What was published stays on the platform. |
| Comments and mentions read into the inbox | Kept with the account record. |
Disconnecting in Flung does not end the approval on the platform's side. To end that too, remove Flung in the platform's settings, below.
Remove Flung in the platform's settings
Every platform lets you take back an app's access. Once you do, the tokens Flung holds stop working, and Flung cannot post or read for the account again until someone connects it again.
| Platform | Where to look |
|---|---|
| Settings and privacy, then Settings, then Apps and websites. For a Page, also the Page's Business integrations. | |
| Settings, then Website permissions, then Apps and websites. | |
| Threads | Settings, then Account, then Website permissions. |
| YouTube and Google | Your Google Account's third-party connections (opens in a new tab) page. |
| TikTok | Settings and privacy, then Security and permissions, then Manage app permissions. |
| X | Settings, then Security and account access, then Apps and sessions, then Connected apps. |
| Settings, then Data privacy, then Permitted services. | |
| Settings, then Security and logins, then Apps. | |
| Discord | Remove Flung's bot from the server, and in User Settings, under Authorized Apps, deauthorise Flung. |
| Mastodon | Preferences on your own server, then Account, then Authorized apps. |
| Bluesky | Your Bluesky server's list of connected apps, where it has one. Changing your password also ends every app's session. |
| Farcaster | Your Farcaster app's list of connected apps. |
Platforms move these pages from time to time. If a page is not where the table says, the platform's help pages say where it is now.
On Facebook, Instagram and Threads, Meta tells Flung at once, and Flung acts as the next section describes. On the other platforms Flung learns the next time it uses the token and the platform refuses it: the account is then marked needs_reconnect, the workspace is told, and nothing more is posted to it. To have the account's record deleted too, write to us.
Facebook, Instagram and Threads
Meta sends Flung two signed requests, each checked against Flung's own app secret for that platform.
| You do this on Meta | Meta calls | Flung does |
|---|---|---|
| Remove Flung from your apps | https://api.flung.dev/api/oauth/facebook/deauthorize (or instagram, threads) | Finds every account you connected to Flung on that platform, in every workspace, deletes their access and refresh tokens, and marks them disconnected. |
| Ask Meta to delete your data from Flung | https://api.flung.dev/api/oauth/facebook/data-deletion (or instagram, threads) | Finds the same accounts and deletes them: the account records, with their results on past posts and their inbox items. It answers Meta with a confirmation code and a page to check it. |
Check a deletion request
Meta shows you the confirmation code and a link to Flung's status page. The code names the platform and when the deletion was done, such as facebook-mhd2k9x0-1a2b3c4d, and the page is at:
https://api.flung.dev/api/oauth/data-deletion/<code>
The page says "Your data was deleted" with the platform and the time, in UTC. The deletion has already happened when Meta receives the code: Flung deletes the accounts before it answers. The page reads the time from the code itself, because Flung keeps nothing about you to show. A code that is not one Flung made gets "Unknown request". If you have a question about a request, write to legal@buungroup.com (opens in a new tab) with the code.
Delete a workspace or your sign-in
There is no button for this yet. Write to legal@buungroup.com (opens in a new tab) from the address you sign in with, and say whether you want your sign-in deleted, a workspace you own, or both. We may need to check that it is you. We answer, and do it, within 30 days. Cancel a paid plan on the portal's Plan page first if you do not want the next charge.
Deleting a workspace removes everything in it:
| Removed | What it holds |
|---|---|
| The workspace | Its name, time zone, leaderboard entry and level |
| Members | Who belongs to it, their roles, their email notice choices |
| Connected accounts | Every account record, its tokens and secrets, its posts' results and its inbox items |
| Profiles, posts, templates, variables and feeds | Everything the workspace made |
| Files | Every image and video, and each video's thumbnail |
| Webhook endpoints | The addresses, the secrets and every delivery record |
| API keys | Every key, revoked or not |
| Usage and retry records | The daily counts and stored answers |
| Billing | The Stripe ids, plan and status. Stripe keeps its payment records under its own policy. |
Deleting your sign-in removes your email address, your sessions, your workspace memberships, and the apps and agents you approved. Workspaces you own and that have no other owner are deleted with it, unless you ask us to give them to another member.
What stays
| Data | Why |
|---|---|
| Rows in the staff log | They record what Flung staff did, with ids, the reason and the time. They hold no address, token or key, and the ids point to nothing once the data is deleted. |
| What was published | Posts on a platform stay there under the platform's rules. Delete them on the platform. |
| Emails already sent | Resend keeps its delivery records under its own policy. |
| Payment records | Stripe keeps them under its own policy and the law. |
| Backups | A deleted record can remain for a limited time in Cloudflare's database restore history, and then it is gone. |
| Request logs | Cloudflare's logs service keeps them for its own set time. |
See also
| Page | Why |
|---|---|
| Privacy policy | Everything Flung collects, why, and for how long |
| Terms of service | The agreement to use Flung |
| Add account connecting to your site | The connect panel, where people disconnect accounts |
| Disconnect an account | The API call that disconnects an account |