Data Deletion Policy

1. How to Request Complete Data Deletion

You may request deletion of your account and associated Personal Data by emailing support@alcaads.com with the subject line “Data Deletion Request.” Please send the request from the email address associated with your AlcaAds account or include that address in the request. To help us locate the correct records, identify the relevant workspace and, if applicable, the TikTok account or advertiser ID connected to it.

We may request additional information to verify your identity and authority, particularly for workspace administrator requests or requests made through an authorized agent. Verification protects accounts from unauthorized deletion. You will receive an acknowledgement and status update through the contact method you provide.

Workspace administrators may also begin the process from account settings if that control is available in their plan. Account deletion is distinct from canceling a subscription; canceling future billing does not itself remove data.

2. How to Disconnect a TikTok Account

1. Sign in to app.alcaads.com.
2. Open the applicable workspace and select Integrations or Connected Accounts.
3. Select the TikTok account connection that you want to remove.
4. Choose Disconnect and confirm.

Disconnection stops AlcaAds from making new authorized requests using that connection once the credential is invalidated. You can also revoke AlcaAds authorization through TikTok's connected-app or account permissions controls. To remove data already retained by AlcaAds, submit a deletion request; revocation alone does not necessarily erase historical account records.

3. Data Removed After a Valid Request

Subject to the exceptions below, we delete or de-identify data associated with the request, including:

• Account profile, authentication association, and workspace membership records attributable to the requester;
• Stored TikTok authorization tokens and connection metadata;
• Authorized TikTok advertising, campaign, ad group, ad, pixel, event, report, and analytics records stored in the active application environment for the applicable connection;
• Support records and files containing the requester's Personal Data where they are not required for an exception; and
• Device, usage, and analytics data that can reasonably be linked to the requester, where deletion is technically feasible and legally required.

After deletion, we will not use the deleted connection data to provide the Services. Aggregated or irreversibly de-identified operational statistics may remain because they no longer identify the requester or connected account.

4. Data We May Need to Retain

We may retain a limited, protected record where necessary to comply with legal, tax, accounting, anti-fraud, security, audit, dispute-resolution, or contractual obligations. Examples include invoices, payment-status information, suppression records needed to honor future deletion preferences, access/security logs, evidence of a request, and records required to establish, exercise, or defend legal claims. Retained data is restricted to the purpose requiring retention and is not used for ordinary product features.

Data in encrypted backups may persist until the applicable backup cycle expires. Backup data is segregated, not restored for routine use, and deleted through normal rotation unless a legal obligation requires otherwise.

5. Maximum Processing Time

We aim to complete verified deletion requests within 30 days of verification. If a request is complex, involves multiple workspaces, conflicts with another user's rights, or requires an applicable legal extension, we may take up to 60 additional days where law permits. We will notify you of the reason and expected timing. Encrypted backup rotation is generally completed within 90 days after active-system deletion.

If you request removal of TikTok API data specifically, the same 30-day target applies after verification and permission revocation; see the dedicated instructions for further detail.