Deletion has several shapes, and picking the wrong one is how people end up removing more than they meant to. Start with the smallest that solves the problem.
What you need: for a location deletion, the Owner role. Everything else is available to anyone who can see the data.
A customer's review on the site
We cannot delete a customer's review from a review site, and neither can you from here: the review belongs to the person who wrote it and to the site. Archiving a review only clears it from your feed. To have a review taken down, report it to the site under the site's own rules.
One source
Disconnect on a source card in Sources revokes the token with the site and deletes it here, stops us reading the source and stops its rules firing. The reviews collected through it are kept for 30 days and then deleted, so reconnecting inside that window is one sign-in and everything you already had is still there.
Delete source and history in the same card's menu is the immediate version: it deletes everything we collected through the source now rather than in 30 days. You confirm by typing its name, because reconnecting cannot bring any of it back.
Removing ReviewComet in your Facebook settings does the same thing from the other end, and takes effect at once.
A whole location
Settings has a Danger zone tab.
The Danger zone tab in Settings, showing transfer ownership above delete this location.
Delete this location removes every rule, agent, saved reply and review in it and disconnects its sources. Team members lose access immediately, billing stops the same day, and there is no export afterward, so take your CSV first. You confirm by typing the location name, and it is then scheduled: it disappears in 24 hours, and until then support can still stop it.
Replies you already posted on a review site stay posted. Nothing is removed from the sites on the way out.
Transfer ownership is the other card, for handing a location and its billing to somebody else instead of deleting it.
Your own account
The same Danger zone tab has Delete your account, and every role has it. There is no password prompt: plenty of people sign in with Google or Facebook and have none.
Press it and we email you a link. Nothing happens until you open that link, it works once, and it expires in a day. Opening it schedules the deletion, and you then have 24 hours to stop it with the second link we send.
If you are the only person on the account this closes the whole thing: every location, its history and every connected source. If others share it, only you go. An owner with other people on the account transfers ownership or deletes them first, and the card says so.
If the account is an agency, closing it also cancels your clients' subscriptions on your own Stripe. With Stripe disconnected we cannot, so the close asks you to cancel them there first.
Invoices we are legally required to keep stay, with your name taken off them.
A reviewer's data
Someone who reviewed your business can ask for their review to be removed from our copy. In that relationship you are the controller and we act on your instructions, so the request usually reaches you. Write to support@reviewcomet.com with the review and we remove it from our records. The site keeps its own copy, and only the site can remove that.
If the request comes to us first we pass it to you, and where we are permitted to act directly we delete it ourselves within 30 days.
Requests that arrive through Facebook
Facebook has its own route. When somebody removes ReviewComet from their apps list or asks Meta to delete their data, Meta sends us a signed request. We record it, answer immediately with a confirmation code and a link to a status page, and do the erasing afterward.
The deletion status page showing a headline, a confirmation code and the date received.
The status page tells the person whether the request is queued, complete, or refused with the reason. Requests are completed within 30 days.
2 honest limits are printed on that page rather than hidden:
- Removing the app is not closing an account. For a customer, deletion covers the access tokens, the connected sources and everything collected through them. It does not touch their own account, email address or billing history, because that is a separate relationship with its own way of ending.
- Identifiers do not always match. Facebook gives an app a different identifier for a reviewer than the one a deletion request carries. Where nothing matches, the page says we hold no data under that identifier rather than reporting a deletion that never happened.
Requests about any other site come to us by email, and the address to write to is support@reviewcomet.com.
How long deletion takes
Access is revoked immediately. Data is deleted within 30 days. Encrypted backups roll within 35 days, so a deletion reaches them inside that window, and a backup is never restored to undo one. Records we are legally required to keep, such as invoices, are kept for as long as the law says.