Delete my data — Mediator

Delete my data

Hard-delete your account and everything linked to it, or request deletion if you can't sign in.

The Delete my data page is your GDPR self-service exit. It serves three audiences from one URL:

Delete everything (signed in)

When you're signed in, the page offers a one-button Delete my account now action. Pressing it (after a confirmation prompt) immediately and permanently removes:

  • Your user account and profile.
  • Every message you've sent or received across all your contacts.
  • Your contacts and their per-contact AI configuration (system prompts, memory, tools).
  • Your connected platform accounts (WhatsApp / Facebook sessions) and integrations.
  • Your stored AI provider API key.

Deletion is a hard DELETE with cascades — there is no trash, no soft-delete, and no undo. A confirmation email is sent to your address recording when it happened. After deletion you're logged out; signing back in creates a fresh, empty account.

Tip: export your data first if you want a copy before it's gone.

Ask us to delete it for you (can't sign in)

If you can no longer sign in — for example the Google or Facebook account you used is gone — enter the email you used and submit a deletion request. The operator receives the request and processes it within 30 days. You don't need to be signed in for this path.

Meta data-deletion callback

When a Facebook user removes the app from their Meta account, Meta sends an HMAC-signed signed_request to this same URL. The server verifies the signature with the app secret and deletes the matching account automatically, then returns a confirmation code and status URL to Meta as GDPR requires. You'll never see this path as a human — it's machine-to-machine.