Data Deletion Policy
You have the right to request deletion of your personal data and business data at any time. This page explains exactly what gets deleted, how to request it, and the timeline.
Last updated: June 2026
1. What Data FigureOut Holds
| Data Type | Description | Source |
|---|---|---|
| Account Information | Name, email address, profile photo URL | Google OAuth at signup |
| OAuth Tokens | Google access token and refresh token | Google OAuth flow |
| Business Locations | GBP location IDs, names, addresses, phone numbers | Google My Business API |
| Reviews | Customer reviews synced from your Google Business Profile | Google My Business API |
| AI Reply Drafts | AI-generated replies to customer reviews | Generated by FigureOut via Gemini AI |
| Published Posts | GBP posts created via FigureOut | Created by you in FigureOut |
| Billing Records | Payment plan, subscription history (no card numbers stored) | Billing transactions |
| Automation Rules | Auto-reply rules you have configured | Configured by you in FigureOut |
Note: FigureOut does not store your Google password, payment card numbers, or any biometric data.
2. How to Request Deletion / Erasure
Option A — Dedicated Privacy Portal (Fastest)
You can submit an official Data Principal Erasure request directly using our data rights channel. Send your request specifying erasure details through the Data Rights Portal →.
Option B — Email Request (Grievance Officer)
Send an email to privacy@figureout.in with subject: DPDP Data Erasure Request
Include your registered account email and specify if you require partial or full deletion of history.
Option C — Revoke Google OAuth Access Immediately
Visit myaccount.google.com/permissions → Find FigureOut → Click "Remove Access". This immediately invalidates our tokens.
3. Deletion & Export Timelines
To protect user identity and maintain compliance, all Access, Correction, and Export requests are manually reviewed, verified, and processed by our privacy officers. We do not use automated exports to prevent unauthorized data exposure.
| Action Type | Processing Timeline (SLA) |
|---|---|
| Grievance Email Acknowledgement | Within 72 hours |
| Manual Account Data Deletion | Within 30 days of confirmed verification |
| Manual Data Export Delivery | Within 30 days (delivered securely via verified email) |
4. What Gets Deleted vs. Retained
| Data | Upon Full Deletion |
|---|---|
| Account record (name, email) | Permanently Deleted |
| Google OAuth tokens | Immediately Deleted |
| Business location data, reviews, AI replies | Permanently Deleted |
| Application logs | Expired per 30-day rolling policy |
| Billing records | Retained 7 years per Indian financial regulations |
Important: Deleting your FigureOut account does not delete data on Google's side. Reviews and posts on your actual Google Business Profile are managed by Google.
5. Grievance Desk for Erasure Requests
- Email: privacy@figureout.in
- Subject line: DPDP Data Erasure Request
- Response SLA: Acknowledgement within 72 hours; hard deletion executed within 30 days under the DPDP Act 2023.