Request Data Deletion

Connected sources. When you connect a data source (for example your Meta ad account), BlickIQ stores two things: an encrypted access token that lets us read that account on your behalf, and the business data we sync from it — for a Meta connection, this is advertising performance data such as campaign, ad-set and ad names, spend, impressions, clicks and conversions. The access token is encrypted at rest and held only in EU infrastructure.

Conversation history. The questions you ask and the answers BlickIQ gives are saved so you can return to them. A conversation is deleted automatically once it has gone unused for your plan’s history period (the fourth exception below), or earlier if you delete it.

What we mostly do not hold. For Shopify, WooCommerce, Stripe and FundraisingBox we drop names, email addresses, phone numbers, postal addresses and bank account numbers before anything is written to our database, and we store no personal data about the people who saw or clicked your ads. Some things do remain: the source system’s own record identifiers, free-text and pass-through fields that someone on your side may have typed personal data into, and Sendcloud orders and returns, which we currently store as the complete record Sendcloud sends us and which can include recipient contact details. Rather than keep a second copy of that list here and let the two drift apart, the current one lives in section 3 of our Privacy Policy. All of it is covered by a deletion request.

Deleting a conversation yourself is immediate. For anything you ask us to delete by email — a single connector, or your whole account — we complete the deletion within 30 days of your request, and usually much sooner. Deletion removes data from our live systems. A copy can still persist for a while afterwards in places we do not fully control, including our database provider’s routine encrypted backups, our hosting provider’s log stream, our AI provider’s short-term retention of the prompts sent to it, the transcripts of our team’s internal work sessions described in section 2 of our privacy policy, and the technical error reports described in section 5 of our privacy policy, which we cannot find and delete on request and which are deleted automatically after 90 days. Each rolls off on its own schedule. We have not yet established whether we can delete an individual transcript of those internal sessions at Anthropic, so we do not promise it; they follow the period stated in section 2 of our privacy policy.

There is no automatic deletion timer for your account and connector data, with four narrow exceptions, set out in section 6 of our privacy policy. First, quick questions asked straight from the dashboard are cleared once they are more than 24 hours old, the next time that workspace is opened. Second, the score sheets of our automatic quality checks on answers, which hold no question text and no figures from your data, are deleted after 90 days. Third, support records have timers of their own: we delete from our database support tickets after 12 months, transcripts of support chats handed to a human after 90 days, ratings of support replies after 6 months, and the record that a support conversation started after 90 days. When we delete your account at your request, we delete the support records linked to it at the same time; a support ticket sent without signing in is deleted on request by the email address it was sent from; transcripts handed to a human, ratings, and the record that a chat started, from a support chat without signing in, have no account or email address field, so only these timers remove them, together with anything you typed into such a chat, including your own email address. Fourth, a conversation that has had no new question and no rename for your plan’s history period (3 months on Starter, 12 on Growth, 24 on Custom) is deleted with all of its messages and cannot be restored; opening it does not count as using it. Nothing is deleted this way from an account whose subscription has lapsed or been cancelled, and after a change of plan the new period applies no earlier than 30 days after the change. This does not reach the quality sample described in section 2 of our privacy policy. Other data in your account stays until you delete it or ask us to.

1. Records we are legally required to keep. Erasure does not extend to data we must retain to meet a legal obligation or to establish or defend legal claims (GDPR Art. 17(3)(b) and (e)). In practice this is billing and accounting records, which German commercial and tax law (HGB § 257, AO § 147) requires us to keep for several years. We cannot delete those on request, and we will tell you what was kept.

2. Deletion works at account level, not per person. Conversations belong to the BlickIQ account rather than to an individual user, so on a shared team account we cannot separate one colleague’s chat history from another’s. A request covers your BlickIQ account and the data associated with it. If you are one of several people on a shared account, speak to your account administrator first.

3. If you are a customer or donor of a business that uses BlickIQ. For whatever we hold about you we act on that business’s instructions rather than our own. Please contact the shop, charity or company you dealt with directly — they can instruct us, and we will act on their instruction. We cannot act on such a request ourselves.