Unlinking & Data Deletion

Disconnecting is a two-stage control, because a connection is both a credential and a piece of history.

The first click is Disconnect. CampaignFlow calls the platform to revoke the access grant, then overwrites the stored token with an empty encrypted value and marks the connection revoked. At that point nothing can be published to or read from that account. The connection row itself survives, because the delivery history for posts that already published points at it.

The second click on that same row is now labelled Remove, and it deletes the row outright — unless real publish history still references it, in which case the row stays visible as a disconnected account. Both actions are confirmed in a dialog first.

Deactivating signs you out everywhere and stops all scheduled publishing, but keeps your data exactly as it is. Your account can be reactivated by simply logging back in. This is the reversible option — if you are not certain you want your work gone, take this one.

Deleting is immediate and irreversible. Once you confirm with your password, the following are removed:

• Your user record and every session.
• Your brand brief — audiences, pillars, CTA ladder, don't-say list, and your uploaded logo.
• Every campaign, post, slide, revision and piece of feedback.
• Every uploaded image and video, and every rendered slide and transcoded rendition — deleted from Blob storage as well as from the database.
• All connected-account credentials, revoked at the platform first and then destroyed.
• The full publishing and delivery history.
• Notification channel configurations.
• Approval links.

If you have more than one brand, you can delete just one from Settings → Danger zone, without touching your account or your other brands. You confirm by typing the brand's name and your password. It removes everything in section 2.3 that belongs to that brand — its brief, campaigns, posts, media (from storage as well as the database), connected-account credentials (revoked at the platform first), publishing history and approval links — and removes anyone else's access to it. Posts already published stay live on the platform. Your only remaining brand cannot be deleted this way; delete your account instead.

Disconnecting inside CampaignFlow already revokes the grant. Revoking on the platform directly is a belt-and-braces step you can also take, and it is the right route if you no longer have access to the CampaignFlow account.

In the Instagram app, go to Settings and privacy → Website permissions → Apps and websites, and remove CampaignFlow.

On Facebook, go to Settings & privacy → Settings → Apps and Websites, and remove CampaignFlow.

On LinkedIn, go to Settings & Privacy → Data privacy → Permitted services, and remove CampaignFlow.

YouTube publishing and Google Drive import both use your Google account. Manage both at https://myaccount.google.com/permissions and remove CampaignFlow's access there.

Revoking on the platform stops future publishing and reading. It does not remove anything from CampaignFlow: the copy, campaigns and delivery history already stored here stay until you delete your CampaignFlow account.

If you are the only owner of a brand that still has other members, deleting your account would erase work that is not yours. CampaignFlow refuses the deletion and names the brand that is blocking it.

To go ahead, do one of these first, then delete again:

• Promote another member of that brand to owner.
• Remove the other members from that brand.

Brands where someone else is already an owner do not block anything and are left untouched — you are simply removed as a member.