Sanctum — Data deletion

Last updated: 2026-05-30

What we hold

For each connected Instagram account, Sanctum stores:

• Your Instagram user ID and username.
• A long-lived access token, encrypted at rest.
• For every comment we hid: identifier, category, confidence score, the comment text, the commenter's username, the timestamps it was hidden and (if applicable) restored.
• A deduplication index — the identifier and timestamp of every comment Sanctum has classified (no text, no username) — so the same comment is never re-classified or re-charged.
• Restore signals and any threshold adjustments you have accepted, used for per-account adaptive moderation.
• Your protection-mode choice and (if you opted in) your email address for the weekly digest.

Comment text and commenter username are automatically purged 60 days after we hid the comment. Hide metadata and restore signals are retained until you disconnect or delete your data.

How to delete your data

You have three options:

Option 1 — from Settings

Go to Settings in Sanctum and use the Delete my data action. This wipes everything Sanctum holds about you and signs you out.

Option 2 — revoke from Instagram

1. Open the Instagram app or instagram.com.
2. Profile → Settings and activity → Apps and websites.
3. Find Sanctum in the list and tap Remove.

Removing Sanctum from Instagram immediately stops it from accessing your account or receiving new comments. On its own it does not erase the data Sanctum already holds — to delete that too, use Option 1 (Delete my data, in Settings) or Option 3 (email request) below.

Option 3 — email request

Send an email to [email protected] with the subject line Data deletion request and the Instagram handle you connected. We will delete all stored data within 30 days and reply to confirm.

What gets deleted

All rows in our database whose user_id matches yours, including the access token, every hide record (with its text), the classification index, every restore signal, every threshold adjustment, and any cached metadata. Backups are reconciled within 30 days from the deletion date.

Contact

Bartosz Kobylinski · [email protected]