User Data Deletion Instructions & Request Portal

If you signed in with Facebook or linked Facebook Pages / Lead Ads, you can revoke access and remove the Astrya application directly from Meta:

1. Log in to your Facebook profile and open Settings & Privacy > Settings.
2. In the left-hand navigation panel, select Apps and Websites (or Business Integrations).
3. Find Astrya in the list of active applications.
4. Click the Remove button next to Astrya.
5. Facebook will instantly revoke our OAuth token and notify our server. Once removed, Astrya can no longer access or query your Facebook account or Lead Ads.

If you are an active account administrator, you can disconnect any advertising provider at any time:

1. Sign in to your Astrya dashboard at astryapro.com/login.
2. Navigate to Settings > Integrations.
3. Locate Meta (Facebook & Instagram) or Google Ads.
4. Click the red Disconnect button.
5. All stored refresh tokens and API access credentials are purged from our encrypted database immediately. Background sync crons are halted on the spot.

Organization owners can delete their entire organization, purging all team members, clients, campaigns, leads, and activity history:

1. Sign in as an Owner and go to Settings > Data export & deletion.
2. Under the Delete Organization section, type your organization name exactly as shown to confirm.
3. Click Delete Organization.
4. Access is permanently locked for all team members. The database marks the organization as deleted, and after a 30-day safety grace period (to prevent accidental data loss), all records are irrevocably wiped.

If you are a consumer who submitted an inquiry through a Facebook Lead Ad or website form managed by an Astrya customer, or if you cannot access your account, you can send us a deletion request by email:

• Write to us: Send an email to privacy@astryapro.com with the subject line "Data Deletion Request".
• Required Information: Please provide the email address or phone number submitted, along with the business name or ad you interacted with.
• Confirmation: We reply to confirm that we have received the request and to tell you which records we found.
• Resolution Timeline: The records we identify are deleted from our live systems within thirty (30) calendar days, and we write to you once that is done. Encrypted backups are kept on a rolling ninety (90) day cycle for disaster recovery and are overwritten as that cycle turns; deleted records are not restored from them.