Skip to main content
Swiplay

How to delete your data

You can ask Swiplay to delete your account and the personal data we hold about you at any time. This page explains the process, what gets deleted, what we are legally required to retain, and how to revoke OAuth access to your TikTok / Instagram / YouTube accounts.

Option 1 · Self-service from your account

For creators:

  1. Sign in to swiplay.com.
  2. Open Settings → Account → Delete my account.
  3. Confirm. The system creates a deletion request, processed within 30 days (article 12.3 GDPR). If you have ongoing campaign earnings, fiscal data, or unresolved disputes, you will receive an explanation email and the deletion will be queued for admin review.

For studios:

  1. Sign in to swiplay.com as the studio account owner.
  2. Open Studio Settings → Account → Delete studio.
  3. Confirm. Studios with active campaigns must close them first; the UI will list any blockers.

Option 2 · Email request

If you cannot sign in (lost access, deleted email, etc.) or prefer email:

Send a request to contact@swiplay.com

Include the email address you registered with and a clear statement that you want your account and personal data deleted. We will reply within 30 days.

Revoking OAuth access (TikTok, Instagram, YouTube)

If you only want Swiplay to stop accessing your social platforms (without deleting your Swiplay account), you can revoke OAuth access directly:

  • From Swiplay: Settings → Linked accounts → Disconnect on the platform you want to revoke. Effective immediately on Swiplay; the platform-side revocation propagates within 24 hours.
  • From Google: visit myaccount.google.com/permissions, locate "Swiplay", click "Remove access".
  • From TikTok: app Settings → Privacy → Permissions → Manage app permissions → revoke Swiplay.
  • From Instagram / Meta: visit accounts.meta.com/profile/activity/permissions, find Swiplay, remove.

What is deleted

  • Profile data: name, email, phone, address, avatar.
  • Authentication credentials and OAuth tokens (TikTok, Instagram, YouTube, Google, Discord).
  • Cached social-platform metrics tied to your account (audience demographics, video stats).
  • Notification preferences, marketing opt-ins, support tickets.
  • Submissions, drafts, comments tied to you.

What we are legally required to retain

Some categories cannot be deleted on request because they are subject to mandatory retention. The retained data is kept in a restricted-access archive, used only when the law explicitly requires (audit, fiscal control, dispute).

  • DAC7 fiscal data (TIN, fiscal address, total payments, country): 5 years from the reporting reference year (Directive EU 2021/514, Article 1649 ter A of French Tax Code).
  • Invoices, payment receipts, ledger entries: 10 years (Article L123-22 of French Commercial Code).
  • Authentication logs, security events: 1 year (legitimate interest, fraud prevention).
  • Consent ledger: 3 years after the last consent event (proof of consent under article 7.1 GDPR).

Timing

We respond to all deletion requests within 30 days (article 12.3 GDPR), extendable once by two months for complex requests (we will tell you in writing if that is the case). The technical erasure runs within 24 hours of admin approval.

Questions, complaints

Data Protection contact: contact@swiplay.com. You also have the right to file a complaint with the French data protection authority (CNIL, www.cnil.fr) or the supervisory authority of your country of residence.