Data deletion

You can cut the connection without contacting us, from either side:

• Here: go to Accounts and click Remove on the profile. The access token is blocked from every new operation immediately, along with any posts still scheduled for it. For Instagram/Facebook, Piloto also attempts to remove the account's event subscription. The token remains encrypted only while that removal is being confirmed. A refusal that proves the operation did not happen may be retried; an ambiguous result is not repeated. A credential error deletes the token at once, and every other case has a 30-day maximum, after which the token is deleted regardless.
• On Instagram/Facebook: Settings → Apps and websites and remove Piloto do Afiliado's access. This is also the direct way to end the authorization when Meta does not confirm the unsubscribe requested by Piloto.
• On TikTok: Settings → Security → Manage connected apps.
• On YouTube/Google: Accounts → Remove revokes authorization and deletes authorized data within 7 days. If you revoke access on the Google Account permissions page, deletion occurs within 30 days after token validation detects the change.
• On every other network: open its security or connected-apps area and revoke Piloto's access. The screen name varies by platform.

Go to Accounts, scroll to Delete account, type your password and confirm. The account and everything in it (list below) becomes inaccessible immediately, with no one in between. If a publication or message is already being sent, the button asks you to retry in a moment instead of deleting midway through that call. After the database commit, physical storage cleanup is retried automatically if the provider is unavailable; the file already returns 404.

If you cannot sign in (lost password, for instance), write to contato@pilotodoafiliado.com.br from your registered e-mail address requesting deletion. We confirm within 48 business hours and complete it within 30 days.

• Your account, name, e-mail, and password.
• Every connected profile and its access tokens.
• Every image and video you uploaded.
• Every scheduled publication and the history of what was published.
• Every automation.
• Every inbox conversation — DMs and comments, including message content.

An OAuth response from Meta that was already in transit may arrive after deletion. If that happens, Piloto creates only a technical record with no account access, removes the name, e-mail, and other personal data, and uses the encrypted token exclusively to undo the remote subscription. That token is also subject to the 30-day maximum.

Posts already published stay on your profile. Piloto publishes; it does not delete — removing your account here does not remove content already published to connected networks. To take a post down, delete it in that network's own app.

Technical logs held by the hosting provider (IP address and request data) follow Cloudflare's retention, typically a few days, and are not under our direct control.

An opaque cryptographic fingerprint of the social identity may also remain, without a name, e-mail, raw social ID, token, or message content. It prevents an old, uncertain action from being repeated after deletion, reconnection, or ownership transfer. The pending state is visible without revealing the previous owner and is closed only by the late response or by an authenticated decision that accepts the risk after checking the current state on the network. The fingerprint is deleted within 30 days after resolution. Only the minimal hash of an idempotency key may remain without a time limit, without identity or content, to prevent the same message from being sent again. If a Web Push delivery has no conclusive result, the subscription's SHA-256 fingerprint may also remain without a time limit to stop that same subscription from being assigned to another account. It contains no endpoint, keys, owner, or content; a new browser subscription produces a different fingerprint.