Data Deletion

You can request deletion of your data from HYGO Shop at any time. This page is the canonical disclosure URL for Meta, TikTok, and other platform reviewers — they require an exact public URL like this one to verify deletion is supported.

If you're a HYGO Shop merchant or operator

You can request a complete data export and account deletion from your dashboard at any time:

• Sign in to api.hygoshop.com and go to Account Settings → Delete account.
• OR email privacy@hygoshop.com from the email associated with your account.

We complete deletion within 30 days of the request. You'll receive an export of your canonical data (catalog, generated content, orders, operator task history) within 7 days of the request, and your account is fully deleted within 30 days.

If you're a customer of a HYGO Shop merchant

Your data was collected by the merchant, not by HYGO Shop directly. Contact the merchant first; they can trigger deletion through their dashboard. If you can't reach the merchant, email privacy@hygoshop.com with the merchant's name and your email address — we will route the request to them and follow up if they don't respond within 7 days.

If you connected your Facebook, Instagram, or TikTok account

You can revoke HYGO Shop's access at any time without sending us a deletion request:

• Facebook + Instagram: Settings → Apps and Websites → "HygoShop" → Remove.
• TikTok: Settings → Privacy → Connected Apps → "HygoShop" → Disconnect.
• YouTube: myaccount.google.com/permissions → "HygoShop" → Remove access.

Revocation stops all future API calls and is recognized within 5 minutes. We delete the merchant's cached engagement data tied to that platform connection within 30 days.

Programmatic deletion (for Meta + TikTok review verification)

Platform reviewers verify the deletion endpoint by sending a POST request to:

POST https://hygoshop.com/data-deletion
Content-Type: application/json

{
  "user_id": "<platform_user_id>",
  "platform": "facebook" | "instagram" | "tiktok" | "youtube"
}

The endpoint queues a deletion job that completes within 30 days and returns a 200 response immediately with a tracking id:

{
  "ok": true,
  "tracking_id": "del_<opaque>",
  "estimated_completion": "<ISO 8601>"
}

You can check status at GET /data-deletion?tracking_id=del_xyz.

What gets deleted

• Account profile (operator profile, merchant account)
• Cached platform engagement data tied to the user
• Connected-channel auth tokens
• OAuth state records
• Aggregated analytics data is retained in anonymized form (no user-identifying records); raw per-user records are deleted

Retention exceptions (legal requirement)

We retain a narrow set of records for legal + accounting compliance:

• Stripe-side payout records — kept by Stripe per their retention policy. HYGO Shop's local copy is deleted; the immutable Stripe record persists.
• Tax filings — sales records aggregated into our tax filings cannot be selectively deleted from the filing itself, but the underlying personally-identifiable order data is removed.
• Anti-fraud + abuse signals — limited fields (hashed email, IP-derived country) are retained for up to 24 months to prevent abuse cycles. No content of your activity is retained.

Last updated: 2026-05-07