Your Right to Deletion
Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have the right to request the deletion of your personal data. Deletion is carried out within 30 days of confirmation. In cases of particular complexity or a high volume of concurrent requests, this period may be extended by up to two additional months. We will notify you of any such extension within the first month, along with the reasons for the delay, in accordance with GDPR Article 12(3).
After you submit this form we email a confirmation link to the address you entered. Nothing is deleted until you use that link, which is how we verify the request came from the person the data belongs to rather than from someone who merely knows the address. The same link cancels the request at any point before it is carried out.
You will also receive a confirmation code. Save it: it is the only way to look up your request on our status page.
If you signed in with Facebook, you can also remove Formation Ads in your Facebook settings (Settings → Apps and Websites) and choose to delete your data there. Facebook sends us a signed request, we open the same kind of deletion request for you, and Facebook shows you a confirmation code and a link to our status page.
What Gets Deleted
A deletion request is about you, the person. When it is carried out we erase:
- Your account information — your name, email address and profile picture are replaced with placeholders, your account is deactivated, and your multi-factor authentication secrets and backup codes are deleted.
- Your Facebook login — the link between your Facebook account and Formation Ads is removed, together with your active sessions. If you were the person who connected your organization to Meta, that Meta access token is cleared and an administrator has to reconnect.
- Your contact details elsewhere — your email address is removed from team invites, demo requests, report recipient lists and campaign review records, and your in-app feedback is deleted.
Records that belong to your organization rather than to you are not removed by an individual request, and some are kept as required by law:
- Campaigns, creative assets and delivery metrics — kept with the organization's account; an organization administrator can delete campaigns from the dashboard
- Payment and transaction records — retained for 7 years (federal accounting and tax compliance)
- Audit logs — retained indefinitely (FAR compliance; append-only: the database refuses edits and deletions to these records, and we check daily that this protection is in place)
For full details on retention periods, please review our Privacy Policy.
If you have an account, you can also request deletion from your account settings. Already submitted a request? Check your request status.