Data Deletion Instructions

Two scenarios are covered here:

• You are a restaurant operator who connected your Meta Business Account to Cravit and now want to disconnect and purge the resulting data. • You are a diner whose hashed contact information was added to a Cravit-managed Meta Custom Audience, or whose conversion events were sent to a Cravit-managed Meta Pixel, and you want this data removed from Cravit's records.

If you are a restaurant operator who connected Meta to Cravit: open the Cravit dashboard, go to Settings → Integrations → Meta, and click Disconnect. This action immediately:

• Stops Cravit from sending any further data to Meta on your behalf. • Removes the encrypted access tokens we stored for your account. • Clears the cached Page id, Ad Account id, Catalog id, and Pixel id from your Cravit profile.

After disconnect, no further data flows occur. To request deletion of historical cached data (such as ad insights pulled before disconnect), follow the manual deletion instructions below.

To request deletion of any Cravit-stored data linked to your Meta identity, send an email to [CRAVIT_PRIVACY_EMAIL] with the subject "Meta Data Deletion Request" and include:

• Your full name. • The Meta-side identifier you are requesting deletion for: your Facebook user id, your Page id, your Ad Account id, or — for diners — the email address or phone number that was hashed and added to a Custom Audience. • If you are a restaurant operator, the Cravit account name or operator email so we can correlate your Meta identity with our records.

We will acknowledge your request within 7 business days and complete the deletion within 30 days. We will email you a confirmation when the deletion is complete.

On request, Cravit deletes:

• OAuth access tokens and refresh tokens stored for your Meta account. • Cached identifiers (Business Manager id, Page id, Ad Account id, Catalog id, Pixel id) linked to your account. • Page-scoped engagement metrics cached on Cravit (follower counts, post counts, post engagement totals). • Cached ad insights (spend, impressions, clicks, conversions) attributable to your account. • Custom Audience membership rows linking your hashed email or phone to a Cravit-managed Meta audience. Note that this removal is one-way: we instruct Meta to drop the matching rows from the audience, but Meta's deletion is governed by Meta's own policies.

We may retain limited data even after a deletion request, for the following reasons:

• Aggregated, anonymized analytics data (counts and trends with no link back to your identity) may be retained for our platform analytics. • Records of the deletion request itself (the email address, the date of the request, the action taken) are retained for 24 months for audit and regulatory compliance. • Data we are legally required to retain (for example, tax or fraud-prevention obligations) is retained for the legally mandated period.

• Acknowledgement: within 7 business days of receiving your request. • Deletion completion: within 30 days of acknowledgement, in line with applicable data protection law. • Confirmation: we will email a confirmation when the deletion is complete.

This page covers data Cravit has stored. Data Meta itself stores about you (your Facebook or Instagram profile, your activity on Meta-owned platforms, advertising profiles maintained by Meta) is governed by Meta's own privacy policies.

To request deletion from Meta directly, see Meta's data deletion instructions at https://www.facebook.com/help/contact/2032834846972583 or your account settings on Facebook or Instagram.

If you are unsure whether Cravit holds data linked to your Meta identity, or you have any other question about data deletion, email [CRAVIT_PRIVACY_EMAIL]. We aim to respond within 5 business days.