Deleting your data
Effective September 23, 2026
This page explains what BlastCP stores when you connect a publishing account, how to have it deleted, and what happens to your posts when you do. It sits alongside our Privacy Policy.
What a connected account stores
Connecting an account so BlastCP can post for you creates one record per account, holding:
- the credential that lets us publish — an OAuth access token, for Substack the session cookie you pasted, or for Resend the API key you pasted;
- the account's identifier on that platform, its display name, and its profile photo, so you can tell your connections apart;
- the permissions the credential was granted, and when it expires.
We never read your feed, your followers, your messages, or your activity on any connected platform. We use the credential only to publish or draft the posts you or your agent queue.
Disconnecting vs. deleting
Disconnecting a channel in BlastCP (Channels → Disconnect) revokes the credential with the platform where the platform supports it, and erases it from our database immediately. We keep the connection record itself — the account name, photo and platform identifier — so that reconnecting the same account restores the posts that were waiting on it instead of stranding them.
Deleting removes that record too. Nothing about the account remains: no identifier, no name, no photo, no credential. Use this if you want BlastCP to forget the connection entirely rather than park it.
How to request deletion
From the platform. For accounts connected through Facebook, Instagram or Threads, removing BlastCP in that platform's own app settings notifies us automatically. We delete the connection on receipt and return a confirmation code you can check below — you do not need to contact us as well.
By email. For any connected account, and for your BlastCP account as a whole, email support@blastcp.com from the address you sign in with and tell us what to delete. We action these within 30 days, and in practice much sooner.
Right now, yourself. Disconnecting in BlastCP destroys the credential immediately, without waiting for us. If your concern is that we can still post as you, that is the fastest way to end it — you can then ask for the rest of the record by email.
What happens to your posts
We do not delete your posts when we delete a connection. The words are yours and they were written in BlastCP, not taken from the platform, and erasing a workspace's drafts because one account was removed would destroy work nobody asked us to destroy.
Scheduled posts that were waiting on the deleted account are held as drafts, with a note saying why, and cannot publish until someone connects an account and schedules them again. Posts already published stay in your history. If you want the posts deleted as well, say so in your email and we will delete them.
Checking a request
A deletion started from Facebook, Instagram or Threads returns a confirmation code. Enter it on the status page to see what was deleted and when. The code identifies the request only — the page never shows your account, your name, or which workspace it belonged to.
Contact
Questions, or a request that does not fit the above? Email support@blastcp.com.