Data Deletion Instructions

Data Deletion Instructions — 車査定ラボ SNS Auto Posting Service

Effective date: 2026-04-28
Last updated: 2026-04-28
Operator: 株式会社エメラルドオーシャン
Service: 車査定ラボ SNS Auto Posting Service

このページは、Meta App Review および TikTok Production 審査において必須となる “Data Deletion Instructions URL” の提出先です。

1. Overview

When a Client revokes authorization for the Service, or upon explicit request, the Operator will delete all data that was collected, generated, or stored in connection with the Client’s account. This page describes the deletion procedure, what is deleted, and the timeline.

2. What gets deleted

Upon a verified deletion request, the Operator deletes:

CategoryExamplesStorage location
OAuth credentialsFacebook Page Token, Instagram Business Account ID, TikTok access/refresh tokens, YouTube refresh token, X OAuth tokensconfig/tokens/<client_id>.json, config/tiktok_token.json, config/youtube_token.pickle, ~/.zshrc exports
Generated contentAll MP4 videos, captions, hashtags, voice-over audio, subtitle PNG/SRT, scenario Markdown filesreels/<YYYYMMDD_*>/ for the Client
Metadatameta.json, captions.json, caption.txtreels/<YYYYMMDD_*>/ for the Client
Insights & analyticsinsights.csv, monthly performance reportslogs/ and reports/ for the Client
Service logs identifying the Clientlaunchd logs, validation failureslogs/ (Client identifier removed; non-PII operational logs may persist for up to 30 days for security/audit purposes)
Schedule and configurationaccounts.yaml entry, launchd plist generated for the Clientconfig/, ~/Library/LaunchAgents/

3. How to request deletion

There are two ways to trigger deletion.

Option A — Self-service revocation (immediate effect on the platform side)

Revoke the Service’s access at the source platform:

  • Meta / Instagram:
    Facebook Settings → Business Integrations → “car-satei-lab-i” → Remove
    Or Instagram Settings → Apps and Websites → Active → Remove
  • TikTok:
    TikTok app → Profile → Settings and privacy → Security → Manage Apps → Revoke “車査定ラボ”
  • YouTube / Google:
    https://myaccount.google.com/permissions → Find “車査定ラボ SNS Auto Posting Service” → Remove access
  • X (Twitter):
    Settings → Security and account access → Apps and sessions → Connected apps → Revoke app permissions

After revocation, the Service will fail subsequent API calls for that Client and stop posting on the next scheduled run.

This alone does not delete the data already stored on the Operator’s local environment. To trigger full deletion, also send a deletion request per Option B.

Option B — Deletion request to the Operator (full data wipe)

Send an email to the address below with the following information:

To: ikeda.naoya.1220@gmail.com
Subject: [Data Deletion Request] <Your Client name or account ID>

Body:
- Client legal/business name:
- Connected accounts to be deleted (Instagram username, TikTok handle, YouTube channel ID, X handle):
- Reason (optional):
- Confirmation that you are the authorized representative: YES

The Operator will:

  1. Verify the request via a reply-to-confirm email to the registered Client contact address (within 2 business days).
  2. Execute deletion within seven (7) business days from the verified request.
  3. Send written confirmation upon completion.

4. Timeline summary

ActionTimeline
Acknowledge receipt of deletion requestWithin 2 business days
Verify identity and scopeWithin 5 business days
Complete deletion of all Client dataWithin 7 business days from verified request
Send written confirmationWithin 1 business day after deletion

5. Exceptions

The Operator may retain limited data after deletion only where required by law, including:

  • Tax records (Japanese 法人税法 / 所得税法 — typically 7 years for invoices and contracts)
  • Anti-fraud / abuse logs (no PII; aggregated and irreversibly anonymized)
  • Backup copies for up to 30 days, after which they are overwritten in the standard rotation

These exceptions do not include OAuth tokens, generated content, or any data that could re-identify the Client’s end users.

6. Automated deletion script

The Operator runs the following automated tooling for deletion:

# Pseudocode; the actual implementation lives in scripts/data_deletion.py
python3 scripts/data_deletion.py --client-id <CLIENT_ID> --confirm

This script:

  1. Reads accounts.yaml to locate all paths owned by <CLIENT_ID>
  2. Securely deletes the client’s config/tokens/<client_id>.json
  3. Removes all reels/*/ directories generated for the client
  4. Removes the client’s row from accounts.yaml
  5. Unloads the client’s launchd plist and removes it from ~/Library/LaunchAgents/
  6. Sanitizes log files (removes lines containing the client identifier)
  7. Writes a deletion audit record to logs/deletion_audit.log (operator-only, no client PII retained)

7. Contact

  • Email: ikeda.naoya.1220@gmail.com
  • Postal address: 大阪府堺市西区鳳中町9丁目344-57
  • Operator: 株式会社エメラルドオーシャン
  • Response window: 7 business days for full deletion completion

8. Reviewer notes (for Meta/TikTok app review submission)

The reviewer may verify this procedure by:

  1. Sending a deletion test email from the registered reviewer account
  2. Observing acknowledgement within 2 business days
  3. Receiving a completion confirmation within 7 business days

A standing test account and pre-recorded screencast demonstrating the data_deletion.py script execution are available on request.