Data Deletion

Disconnecting a platform

If you only want to stop Brunos reading a connected account, you do not need to delete anything. Open Integrations in Brunos, choose the platform, and use Disconnect. The authorisation we hold is destroyed at that moment rather than left to expire, and for Google Drive, Shopify, Slack and TikTok the withdrawal is sent to the platform as well, so the access stops being listed there too.

TikTok is worth one extra line, because its access does not lapse on its own: the token it issues has no expiry date, so an authorisation left alone stays valid indefinitely. Disconnecting is what ends it — Brunos asks TikTok to revoke the token and destroys its own copy in the same step.

Meta is the exception to that second half: the credential is held by our broker and never by Brunos, so we can destroy it but cannot remove the grant from your Facebook account. Disconnect here, then remove Brunosunder Settings → Business Integrations on Facebook.

Withdrawing at the platform instead works just as well and always has — your Google account’s third-party access settings, your Shopify admin, your Slack workspace. Uninstalling from Shopify additionally tells us, so the authorisation is destroyed and the synchronised data purged without you asking.

For Google Ads there is no self-service control. It runs on an operator credential held by Brunos rather than on an authorisation you granted, so there is nothing per-workspace to withdraw. Write to hello@brunos.ai and we will stop reading it for you and confirm when it is done.

Disconnecting withdraws access; it does not erase what was already synchronised. Your Shopify orders and products, and anything else read before you disconnected, stay in your workspace so your reporting history survives. Ask us using the address above if you want those deleted too.

What Brunos holds about you

• Account identity — The email address and display name from your sign-in, held so a Space can show who its members are.
• Space membership — Which workspaces you belong to, your role in each, and any invitations you sent or redeemed.
• Product preferences — Saved views, date ranges and pinned metrics — settings, not advertising data.

What Brunos holds from a platform you connected

Stated separately because it is held per workspace rather than per person, and removing the connection is what reaches it:

• Advertising authorisations — For Meta, the credential is held by our broker and never stored by Brunos; it passes through Brunos's server only while you connect or reconnect. For Google Ads, Google Drive, TikTok and Shopify, Brunos holds it encrypted in an isolated vault, sealed per workspace, and destroys it when the connection is removed or the app is uninstalled. For Google Ads and Google Drive, Brunos also keeps the email address of the Google account that authorised the connection, to show which account is connected.
• Shopify orders and products — Order totals, currency, status and timestamps, and product titles and identifiers, for the store you connected. Brunos does not copy customer names, addresses or payment details.
• TikTok campaigns and daily metrics — Campaign names and status, and daily spend, impressions, clicks, conversions and derived rates, for the advertiser accounts you connected.
• Google Ads accounts, campaigns and daily metrics — The name, currency and time zone of each advertising account your authorisation reaches; campaign names, status, type, dates and budgets; and daily spend, impressions, clicks and conversion totals per campaign. No audience data, no search terms, no keywords and no personal information of any kind.

What Brunos does not hold

Worth stating, because it changes what deletion can and cannot reach:

• Payment card details. Brunos does not process payments directly.
• The contents of a customer's Shopify order beyond the totals and status listed above — no names, addresses, emails or payment details.
• Your Meta advertising credentials. When you connect or reconnect Meta, Meta returns a credential to Brunos's server, which exchanges it with Meta for a longer-lived one and hands that straight to our broker, which seals it. Brunos never stores either.
• The Facebook Pages a connected Meta account manages. Each time the Bulk page is opened, each Page's identifier, name, and whether you can run ads as it are read through our broker to offer you the Page your ads run as; Brunos never stores that list. Only the identifier of the Page you choose is sent, with the batch, to our broker and to Meta, which keep it as part of the batch and the ads it creates.
• The image and video files you stage for an ad, whether chosen in Google Drive or uploaded from your computer. Brunos streams each one to our broker for upload to Meta and keeps no copy.
• Google account data beyond what is listed above. Brunos reads the Google Ads data listed above; if you connect Google Drive, it can open only the individual files you choose in Google's file picker; and, if you sign in with Google, it receives your name, email address and profile picture. Nothing else is requested.

Requesting deletion

Email hello@brunos.ai from the address you sign in with, with the subject Data deletion request. Sending from the account’s own address is how we confirm the request is yours; if you no longer control it, say so and we will verify another way rather than refuse.

We acknowledge within 2 business days and complete deletion within 30 days, including from backups on their normal rotation.

What deletion affects

Deleting your account removes your identity, your memberships and your preferences, and revokes every platform authorisation you personally created.

A workspace with other members is not deleted with you — it belongs to the organisation rather than to any one person, and removing it would delete your colleagues’ access alongside your own. If you are the last member, the workspace and its connections go with you. To delete a workspace that still has members, say so in the request and we will confirm with its owner first.

Records we are required to keep — such as an audit trail of changes made to an advertising account — are retained where the law obliges it, and separated from your profile.