Data Deletion

This page explains how to have Dycern LLC, doing business as Xtimates, delete your information. It goes with the Privacy Policy (xtimates.com/legal/privacy). There are two levels: disconnecting one connected account, and deleting your whole account. Both are described below, along with what happens to the data we pulled from Facebook and Google.

Open https://app.xtimates.com, go to Settings › Connections, find the connection (Google, Facebook, Google Sheets, HubSpot, GoHighLevel, Jobber, or an inbound source) and press Disconnect. An owner or admin can do this at any time.

When you disconnect:

• The access token for that account is deleted immediately. We can't read the account after that.
• Syncing stops immediately. The health light goes grey.
• The metrics we synced from that account (ad performance, traffic, search data, sheet rows, CRM records) are deleted from our database within 30 days.
• Estimate records already on your board stay, because they're your customer records and your billing history depends on them. Delete them one at a time in the dashboard, or ask for full account deletion below.
• For Facebook and Google, we also tell the provider to revoke our app's access, so the connection no longer appears in your Facebook or Google settings.

You can reconnect at any time. A fresh connection starts a fresh sync.

To have everything deleted, ask in either of two ways:

1. Email privacy@xtimates.com from the email address on your account, with "Delete my account" in the subject.
2. Open the Help page in your dashboard and send us the request from there.

We confirm it's you. If the request comes from the account's own email address or from inside the signed-in dashboard, that's enough. Otherwise we'll reply to the address on the account and ask you to confirm. Only an owner can delete a company account; a team member can delete their own login.

Then we delete everything listed below from our live database within 30 days and send you a confirmation email. Our hosting provider's backups that still hold deleted rows are purged within 90 days. If you're a current client, deletion also ends the service, so we'll check with you first and give you a chance to export your estimates and invoices.

• Your company profile, logo, service areas, and every team member's login.
• Every connection and its tokens.
• Every metric synced from Google, Meta, Google Sheets, HubSpot, GoHighLevel and Jobber.
• Every estimate request, its history, notes, flags and appointment outcomes, and every job record.
• Website form submissions, webhook payloads and imported CSV rows.
• Your Ask Xtimates chat history and any draft text it produced.
• Support conversations and tickets.
• Your website audit report and screenshots.
• Notification settings and work-log entries that name you.
• Your Stripe customer record's saved payment methods. Stripe keeps its own transaction records under its own policy.

• Invoices and payment records, for 7 years, as tax law requires. They hold your company name, the amounts, the dates and the last digits of the payment method, nothing else.
• The record of which terms you agreed to and when, for as long as a dispute about them is possible.
• Anything we're ordered to keep by a court or a regulator, for as long as the order lasts.

We don't keep anything else once a deletion is done.

What we pulled from Meta while you were connected: your ad account's performance (spend, impressions, clicks and results by campaign, ad set and ad), your Page's basic details, and the entries from the instant forms you connected (name, phone, email and the answers to your form's questions).

When you disconnect Facebook in Settings › Connections, or delete your account, we delete all of it on the timelines above and revoke our app's access to your Facebook account. You can also remove the Xtimates app yourself in Facebook under Settings › Business Integrations at facebook.com/settings. Removing the app there cuts our access immediately; email us or disconnect in the dashboard to have the synced data deleted too.

Data Deletion Request Callback. Deletion requests that reach us through Facebook's data-deletion callback are honored the same way. When Facebook sends us a signed request for a user, we start the deletion for every connection tied to that Facebook account, return a confirmation code, and give Facebook a URL where the status of that request can be checked. The deletion itself follows the same 30-day timeline as a request made by email.

What we pulled from Google while you were connected: Google Ads performance by campaign and ad group, Google Analytics 4 traffic, Search Console search performance, and the rows of the Google Sheet you chose.

When you disconnect Google in Settings › Connections, or delete your account, we delete all of it on the timelines above and revoke our app's access. You can also remove Xtimates's access from your Google account at myaccount.google.com/permissions. Removing it there cuts our access immediately; disconnect in the dashboard or email us to have the synced data deleted too.

Disconnecting any of these in Settings › Connections deletes its token immediately and its synced records on the same timeline as above. For your website form endpoint, webhooks and CSV import, disconnecting removes the endpoint and its secret, so nothing new can arrive. Requests that already came in stay on your board until you delete them or delete your account.

If you asked one of our clients for a price, that contractor controls your information. Ask them first. If you email privacy@xtimates.com instead, we'll pass your request to them and delete our copy when they confirm, or sooner if the law requires. We'll never use your request to contact you ourselves.

An owner or admin can remove you in Settings › Team, which deletes your login. The stage changes and notes you made stay on the company's records, labeled with your name, because they're the company's history. To have your name removed from them too, email us from your account's address.

• The xt_visitor cookie expires when you close your browser. To clear it sooner, clear cookies for Xtimates in your browser.
• Site inquiries and audit requests: email privacy@xtimates.com with the email or website you used, and we'll delete them.

When you cancel, your dashboard stays open, read-only, for 30 days so you can export your estimates and invoices. After that we delete your account as described on this page, unless you've asked us to keep it open or to delete it sooner. The Data Processing Addendum (xtimates.com/legal/dpa) says the same for your customers' information.

Dycern LLC, doing business as Xtimates, Indiana. Deletion requests and questions: privacy@xtimates.com.