Legal
Delete your data
How to remove a connected account, your spa’s data or your own personal data.
Disconnect Instagram, Facebook or Google
A spa owner or manager can disconnect at any time in the dashboard: Settings → Integrations → Disconnect. You can also remove access from the other side:
- Instagram: Settings → Website permissions → Apps and websites → remove spamanagement.co. Facebook: Settings → Apps and websites.
- Google: myaccount.google.com → Security → Third-party connections → remove spamanagement.co.
When access is removed we stop using it straight away and delete the stored token. Messages, comments and insights we copied from that account are deleted within 30 days unless the spa asks us to keep its own reply history.
Ask us to delete data
Email ask@spamanagement.co from the address on your account (or include enough detail for us to find your data) and say what you want deleted:
- A spa account: everything for that spa — clients, bookings, sales, staff accounts, website and connected accounts. Only the spa owner can ask for this.
- A staff member’s account: their sign-in and personal details. Records the spa must keep (such as sales they made) stay, without their personal details where possible.
- A spa client: please ask the spa first, since it controls your data. If you can’t, write to us with the spa’s name and your phone number and we will pass the request on and confirm when it is done.
What happens next
- We confirm we received your request within 3 working days and may ask you to prove who you are.
- We complete the deletion within 30 days and email you when it is done. Copies in encrypted backups are removed as those backups expire (within a further 30 days).
- We keep only what the law requires (for example invoices and accounting records for UAE tax), and nothing else.
More detail is in our privacy policy.