1. Purpose and Scope
Twist Labs SARL is committed to your right to have personal data deleted. This Policy explains what data we hold, how long we retain it, how to submit a deletion request, and how requests are processed.
This Policy complies with Moroccan Law No. 09-08 and, for EEA users, GDPR Article 17.
2. Your Right to Erasure
You may request deletion of your personal data when:
- Your data is no longer necessary for the purpose for which it was collected
- You withdraw consent where processing was consent-based
- You object to processing and no overriding legitimate ground exists
- Your data has been processed unlawfully
- Deletion is required by applicable law
3. When We Delete Data
We delete User Data without undue delay in any of the following situations:
- Upon a verified user deletion request
- When a user deletes their account or no longer has an active account
- When User Data is no longer necessary to provide the Service
- When deletion is required by applicable law or a valid regulatory or court order
4. Data Categories and Retention
| Data Category | Includes | Retention |
|---|---|---|
| Account Data | Name, email, password hash, preferences | Up to 90 days after closure |
| User Content | Brand info, assets, campaign briefs | Up to 90 days after closure or on request |
| Generated Content | AI strategies, copy, visuals | Up to 90 days after closure or on request |
| Third-Party API Data | Meta, Instagram, TikTok, Google, LinkedIn data | Up to 90 days after disconnection |
| Usage & Log Data | Session data, IP, activity | Up to 12 months |
| Billing Records | Invoices, payment history | Up to 10 years — Moroccan law |
| Support Communications | Emails to our team | Up to 3 years from last contact |
5. How to Request Deletion
5.1 In-App Self-Service
- Log in to your Squizz account
- Go to Settings > Account > Delete Account
- Confirm your identity and submit the request
- Your data will be deleted within 30 days
5.2 Email Request
Email legal@squizzthelemon.com with subject: "Data Deletion Request". Please include:
- Your full name
- The email address linked to your account
- A description of the data you wish to have deleted
We will acknowledge receipt within a reasonable timeframe and process your request within 30 days of identity verification.
6. Deletion Process
Upon receiving a verified deletion request, we will:
- Verify your identity to prevent unauthorised deletion
- Deactivate your account immediately if still active
- Delete or permanently anonymise your personal data within 30 days
- Instruct our service providers to delete your data within the same timeframe
- Send written confirmation once deletion is complete
Encrypted backups may retain data for a limited additional period during rotation cycles. This data is not used for any active processing.
7. Exceptions — Data We Cannot Delete
- Billing records required by Moroccan commercial and tax law (up to 10 years)
- Data subject to an active legal dispute, claim, or court order
- Data required to meet a regulatory obligation
Where we cannot delete data, we will restrict its processing, inform you of the reason, and indicate the expected retention end date.
8. Anonymisation
In some cases we may anonymise data rather than delete it. Anonymised data that can no longer be linked to any individual is not personal data and may be retained for statistical purposes.
9. Third-Party Platform Data
Deleting your Squizz account does not delete data held independently by connected platforms (Meta, Instagram, LinkedIn, Google). Contact those platforms directly.
10. Response Timelines
- Acknowledgement: within a reasonable timeframe
- Identity verification: within 5 business days
- Deletion completion: within 30 days of verified request
- Written confirmation: upon completion
- Complex requests: may require additional time with prior notice
11. Contact
Twist Labs SARL
ICE: 003933917000017 | Address: Angle Rue Mozart et Bd d'Anfa, Résidence le Petit Paradis – 7ème étage, Casablanca, Maroc
Email: legal@squizzthelemon.com (Subject: Data Deletion Request)
Website: https://squizzthelemon.com/data-deletion
Morocco: CNDP — cndp.ma | EU: your local Data Protection Authority