# Data deletion

> Page: https://docs.flung.dev/data-deletion. Index of every page: https://docs.flung.dev/llms.txt

How to delete the data Flung holds about you: a connected social account, Flung's access on each platform, or a whole workspace and the people in it. Each way says what it removes and what stays.

Last updated: 2026-10-30

## TL;DR

| Question | Answer |
|---|---|
| I connected a social account through an app that uses Flung. How do I remove it? | Disconnect it in that app, or remove Flung in the platform's own settings. Either ends Flung's access at once. |
| Does disconnecting delete everything? | It deletes the tokens, so Flung can no longer post or read for the account. The account's id and name stay with the workspace's past posts until the account or the workspace is deleted. |
| How do I have the whole account deleted? | Write to legal@buungroup.com with the platform and the account's username. We answer within 30 days. |
| What happens when I remove Flung on Facebook, Instagram or Threads? | Meta tells Flung. Removing the app deletes the tokens; asking Meta to delete your data deletes the accounts too, and gives you a confirmation code. |
| How do I delete my Flung sign-in or a workspace? | Write to legal@buungroup.com from the address you sign in with. We answer within 30 days. |
| Who runs Flung? | Buun Group Pty Ltd, ABN 75 687 193 675, Spring Mountain, QLD 4300, Australia. |

## Disconnect a social account

Disconnecting stops Flung posting to an account and deletes its tokens. There are three ways, and each does the same.

| Way | How |
|---|---|
| In the app you connected it from | Most apps that use Flung show the connect panel, with Disconnect beside each account. It asks you to confirm, then the account leaves the list. |
| With the API | A workspace calls `DELETE /v1/accounts/{id}` with its API key, or with a connect token from its own page. The answer is the account, now `disconnected`. See [Disconnect an account](https://docs.flung.dev/reference/api/delete-v1-accounts-id.md). |
| By asking us | Write to legal@buungroup.com with the platform and the account's username. |

What disconnecting removes and keeps:

| Data | What happens |
|---|---|
| The access token and refresh token | Deleted at once. Flung can no longer post to the account or read from it. |
| Posts scheduled to the account | Not sent to it, because there is no token to send with. |
| The account record: its id and username on the platform, its picture address, and its status | Kept, marked `disconnected`, so the workspace's past posts still show where they went. Other encrypted secrets a few platforms need stay with it, unusable without the tokens. |
| Past posts and their results | Kept until the workspace deletes the post. What was published stays on the platform. |
| Comments and mentions read into the inbox | Kept with the account record. |

Disconnecting in Flung does not end the approval on the platform's side. To end that too, remove Flung in the platform's settings, below.

## Remove Flung in the platform's settings

Every platform lets you take back an app's access. Once you do, the tokens Flung holds stop working, and Flung cannot post or read for the account again until someone connects it again.

| Platform | Where to look |
|---|---|
| Facebook | Settings and privacy, then Settings, then Apps and websites. For a Page, also the Page's Business integrations. |
| Instagram | Settings, then Website permissions, then Apps and websites. |
| Threads | Settings, then Account, then Website permissions. |
| YouTube and Google | Your Google Account's [third-party connections](https://myaccount.google.com/connections) page. |
| TikTok | Settings and privacy, then Security and permissions, then Manage app permissions. |
| X | Settings, then Security and account access, then Apps and sessions, then Connected apps. |
| LinkedIn | Settings, then Data privacy, then Permitted services. |
| Pinterest | Settings, then Security and logins, then Apps. |
| Discord | Remove Flung's bot from the server, and in User Settings, under Authorized Apps, deauthorise Flung. |
| Mastodon | Preferences on your own server, then Account, then Authorized apps. |
| Bluesky | Your Bluesky server's list of connected apps, where it has one. Changing your password also ends every app's session. |
| Farcaster | Your Farcaster app's list of connected apps. |

Platforms move these pages from time to time. If a page is not where the table says, the platform's help pages say where it is now.

On Facebook, Instagram and Threads, Meta tells Flung at once, and Flung acts as the next section describes. On the other platforms Flung learns the next time it uses the token and the platform refuses it: the account is then marked `needs_reconnect`, the workspace is told, and nothing more is posted to it. To have the account's record deleted too, write to us.

## Facebook, Instagram and Threads

Meta sends Flung two signed requests, each checked against Flung's own app secret for that platform.

| You do this on Meta | Meta calls | Flung does |
|---|---|---|
| Remove Flung from your apps | `https://api.flung.dev/api/oauth/facebook/deauthorize` (or `instagram`, `threads`) | Finds every account you connected to Flung on that platform, in every workspace, deletes their access and refresh tokens, and marks them `disconnected`. |
| Ask Meta to delete your data from Flung | `https://api.flung.dev/api/oauth/facebook/data-deletion` (or `instagram`, `threads`) | Finds the same accounts and deletes them: the account records, with their results on past posts and their inbox items. It answers Meta with a confirmation code and a page to check it. |

### Check a deletion request

Meta shows you the confirmation code and a link to Flung's status page. The code names the platform and when the deletion was done, such as `facebook-mhd2k9x0-1a2b3c4d`, and the page is at:

`https://api.flung.dev/api/oauth/data-deletion/<code>`

The page says "Your data was deleted" with the platform and the time, in UTC. The deletion has already happened when Meta receives the code: Flung deletes the accounts before it answers. The page reads the time from the code itself, because Flung keeps nothing about you to show. A code that is not one Flung made gets "Unknown request". If you have a question about a request, write to legal@buungroup.com with the code.

## Delete a workspace or your sign-in

There is no button for this yet. Write to legal@buungroup.com from the address you sign in with, and say whether you want your sign-in deleted, a workspace you own, or both. We may need to check that it is you. We answer, and do it, within 30 days. Cancel a paid plan on the portal's Plan page first if you do not want the next charge.

Deleting a workspace removes everything in it:

| Removed | What it holds |
|---|---|
| The workspace | Its name, time zone, leaderboard entry and level |
| Members | Who belongs to it, their roles, their email notice choices |
| Connected accounts | Every account record, its tokens and secrets, its posts' results and its inbox items |
| Profiles, posts, templates, variables and feeds | Everything the workspace made |
| Files | Every image and video, and each video's thumbnail |
| Webhook endpoints | The addresses, the secrets and every delivery record |
| API keys | Every key, revoked or not |
| Usage and retry records | The daily counts and stored answers |
| Billing | The Stripe ids, plan and status. Stripe keeps its payment records under its own policy. |

Deleting your sign-in removes your email address, your sessions, your workspace memberships, and the apps and agents you approved. Workspaces you own and that have no other owner are deleted with it, unless you ask us to give them to another member.

## What stays

| Data | Why |
|---|---|
| Rows in the staff log | They record what Flung staff did, with ids, the reason and the time. They hold no address, token or key, and the ids point to nothing once the data is deleted. |
| What was published | Posts on a platform stay there under the platform's rules. Delete them on the platform. |
| Emails already sent | Resend keeps its delivery records under its own policy. |
| Payment records | Stripe keeps them under its own policy and the law. |
| Backups | A deleted record can remain for a limited time in Cloudflare's database restore history, and then it is gone. |
| Request logs | Cloudflare's logs service keeps them for its own set time. |

## See also

| Page | Why |
|---|---|
| [Privacy policy](https://docs.flung.dev/privacy.md) | Everything Flung collects, why, and for how long |
| [Terms of service](https://docs.flung.dev/terms.md) | The agreement to use Flung |
| [Add account connecting to your site](https://docs.flung.dev/connect-accounts.md) | The connect panel, where people disconnect accounts |
| [Disconnect an account](https://docs.flung.dev/reference/api/delete-v1-accounts-id.md) | The API call that disconnects an account |