Data Deletion Request

This page explains how to request deletion of your RunMyBiz account and the personal data associated with it. It applies to any user of the Service operated by 1581307 B.C. LTD. (RunMyBiz) and to any data we hold on your behalf, including data we transmit to advertising platforms such as Meta (Facebook, Instagram) through our affiliated company 1551270 B.C. LTD. (Toriva).

When you submit a deletion request, we permanently remove the following from our active production systems:

• Account information: name, email address, password hash, and login credentials.
• Business profile: business name, description, configuration, goals, and preferences you entered during onboarding or in your settings.
• AI conversation history: prompts, instructions, files, and other inputs you submitted to the Service, together with the outputs the agents generated for you.
• Generated artifacts: documents, images, video, audio, code, and any other content produced by the Service for your account.
• Connected integration data: OAuth tokens, API keys, and access grants for third-party services (including any tokens we hold for the Meta Marketing API to operate ad campaigns on your behalf).
• Advertising metadata: the ad copy, audience targeting parameters, and budget configuration we hold for any campaigns we have run for you.
• Operational logs and caches: session logs, briefings, memory embeddings, and other cached operational data tied to your account.

Some records are retained even after a deletion request, in line with our obligations under Canadian, US, and EU law:

• Financial records: invoices, ad-spend ledger entries, and tax documents are retained for up to 7 years to satisfy Canadian tax and financial regulations. Where a financial record contains your personal information, the personally identifying fields are redacted to the extent permitted by law; the financial entries themselves remain.
• Audit logs of money-moving actions: retained for fraud prevention, dispute resolution, and AML/KYC compliance.
• Aggregated and anonymized analytics: data that has been irreversibly de-identified and can no longer be linked to you may be retained for service-improvement purposes.
• Encrypted backups: our backup snapshots are purged on a rolling cycle and may retain a copy of your data for up to 90 days after deletion from active systems. Restored data is purged again at the next cycle.

Email jeff@toriva.ai from the email address on your RunMyBiz account, with the subject line "Data deletion request". Include your business name in the body of the email so we can locate your account.

What happens next:

• We acknowledge receipt of your request within 5 business days.
• If you have an active ad campaign, we pause it immediately.
• We complete deletion within 30 days of receipt and send you a written confirmation.
• To verify deletion, you may attempt to log in to your account or reply to the confirmation email; we will respond with a written attestation of what was deleted.

Email is the canonical channel for legal data-handling requests. Requests submitted via social media, in-app chat, or other channels may be redirected here for processing.

If we have run advertising campaigns on Meta-owned platforms (Facebook, Instagram, Audience Network) on your behalf, ad-campaign data resides on Meta's systems in addition to our own. When you submit a deletion request:

• We will pause and archive any active campaigns, then submit deletion requests for your business's campaign assets via Meta's Marketing API.
• We delete the access tokens, audience definitions, and creative assets we hold on our side.
• Meta retains some campaign-history data (notably billing records, performance aggregates, and platform-policy compliance data) under Meta's own data retention policies. We do not control that retention; you may submit a deletion request directly to Meta if you wish to address it.

Depending on where you live, you may have additional rights related to deletion of your personal information:

• Canada (PIPEDA): you have the right to access and correct your personal information and to challenge our compliance. Withdrawal of consent may be subject to legal or contractual restrictions.
• EU / UK / Switzerland (GDPR Article 17): you have the "right to erasure" of your personal data without undue delay, subject to limited exceptions (legal obligations, freedom of expression, public interest). We respond to GDPR erasure requests within 30 days.
• California (CCPA / CPRA): you have the right to request deletion of personal information we have collected from you, subject to the exceptions enumerated in the CCPA. We do not sell or share personal information for cross-context behavioral advertising.

For full details on your rights and how we process your data, see our Privacy Policy.

1581307 B.C. LTD.
Operating as RunMyBiz
Vancouver, British Columbia, Canada
Email for deletion requests: jeff@toriva.ai

We aim to respond within 5 business days and to complete deletion within 30 days of a verified request.