Legal

Data Deletion Instructions

How to remove MentorU's access to a connected social or video account and delete the data MentorU received from it.

Last updated: October 20, 2026

Platform operator: Kahel Ventures LLC, an Oregon limited liability company, operating MentorU.

What MentorU holds from a connected account

When a workspace owner connects a social or video account to MentorU, MentorU receives the account identifier the provider assigns to MentorU, a display name, the pages, profiles or channels the owner chose to publish to, the permissions granted, and encrypted OAuth access tokens. MentorU uses them only to publish the content the owner approves and to show the connection's status. The Privacy Policy describes each provider in detail.

Option 1: disconnect inside MentorU

The workspace owner can open Connections in the MentorU admin area and disconnect the account. MentorU immediately disables the connection and deletes its usable access tokens from active connection storage.

Option 2: remove MentorU from the provider's settings

You can also remove MentorU from the account itself. When Meta or Threads then notifies MentorU, MentorU deletes the usable access tokens for that account in every workspace that used it, disables any pending publishing approvals, records a confirmation code, and returns a status link that shows only whether the request completed.

  • Facebook: Settings & privacy, then Settings, then Apps and websites. Select MentorU and choose Remove. Meta sends MentorU a deauthorization notice and, if you ask Facebook to delete your data, a data deletion request.
  • Instagram: Settings, then Website permissions (or Apps and websites). Select MentorU and choose Remove. Instagram professional accounts are connected through the Facebook Page they are linked to, so removing MentorU from Facebook removes it from Instagram as well.
  • Threads: Settings, then Account, then Website permissions (or Apps and websites). Select MentorU and choose Remove. Threads sends MentorU its own deauthorization notice, separate from Facebook.
  • LinkedIn: when you connect LinkedIn, you can remove MentorU under Settings, then Data privacy, then Other applications, then Permitted services. MentorU does not receive a notice from LinkedIn, so also disconnect inside MentorU or email us (Option 3).
  • TikTok: when you connect TikTok, you can remove MentorU under Settings and privacy, then Security and permissions, then Manage app permissions. MentorU does not receive a notice from TikTok, so also disconnect inside MentorU or email us (Option 3).
  • YouTube and Google: remove MentorU at https://myaccount.google.com/permissions (Google Account, Security, Third-party apps and services). MentorU disables the connection when the next token refresh is refused, or immediately when you disconnect inside MentorU.

Option 3: email a deletion request

Send a message to support@mentoru.app with the subject “Data deletion request”, naming the workspace and the connected account. MentorU may need to verify your identity and coordinate with the workspace owner when the data belongs to a provider-controlled workspace. Covered active records are targeted for deletion or de-identification within 30 days of a verified request.

Checking a confirmation code

A deletion request that reached MentorU through Meta or Threads returns a confirmation code. Open https://mentoru.app/privacy/data-deletion/<your code> to see whether that request completed and when. The status page shows nothing else: no account, workspace, provider or content details.

What remains after deletion

A deauthorization removes usable access tokens and the connected account's display name from active connection storage. A data deletion request sent through Meta or Threads additionally replaces the stored account, Page and Instagram identifiers and names and the granted permissions on those connections with non-identifying placeholders, and removes any Page tokens and identifiers staged by an unfinished connection. What remains is a disconnected connection record with placeholders, a one-way hash of the provider account identifier on the deletion request record (used only to recognise a repeated delivery of the same request), and secret-free lifecycle audit evidence (the workspace, the provider, the connection identifier and the time the removal was applied, never a token or secret), kept under the schedule in the Security and Data Protection Policy. Content you already published on the provider stays on the provider under its own terms.