Deleting your data
You can have your Kröno.io account and the personal data attached to it deleted, and an organization's super administrator can ask for the whole organization to be deleted. This page explains how, and exactly what happens.
How to request deletion
If you belong to no organization, you can delete your account yourself, under Account & Security. If you belong to one, an administrator who manages users there can delete your account from the Team page; if you belong to several, they need that permission in each. Nobody can delete their own account from the Team page: to delete yours, leave the organization first, or ask one of its administrators. An organization's last active super administrator can't be deleted this way.
You can also email privacy@krono.io from the address you use to sign in, and say that you want your account deleted. Your administrator can also forward the request to that address for you. We reply with whichever of the two ways above fits your account. If you belong to no organization and can't delete your account yourself, we delete it for you; Kröno.io then doesn't ask Facebook to end the access you granted it, so remove Kröno.io on Facebook yourself, under Settings → Business integrations. To delete an organization, its super administrator writes from their own address.
You can also ask Instagram or Facebook to have Kröno.io delete your data. Meta passes the request to Kröno.io, which carries it out automatically. Kröno.io answers Meta with a confirmation code and a link to a Kröno.io page where the request can be checked. What it deletes is described below, under “Removing Kröno.io in Instagram or on Facebook”.
What is deleted
- Your sign‑in identity, which ends every active session on every device, and any passkeys or authenticator apps you added.
- Your profile: email address, display name and avatar.
- Your membership of every organization, and any individual permissions granted to you.
- Your email address in any invitation record, which is replaced so it no longer identifies you.
- Your identity in the sign‑in record, which is detached from the entries; the entries themselves are kept for the organization's security, for at most 12 months from each sign‑in.
- For each Facebook Page you connected, in any organization, the Page's access obtained through you and the ID Facebook assigns you. The organization then has to reconnect the Page to keep publishing to it.
When an account is deleted in Kröno.io, under Account & Security or from the Team page, Kröno.io then also asks Facebook to end the access that person granted it, unless the same Facebook login is still connected, or being connected, to Kröno.io for another Page. The deletion doesn't depend on Facebook's answer, and you can always remove Kröno.io on Facebook yourself, under Settings → Business integrations.
What is not deleted, and why
- Work you created for your organization. Posts, captions, media, comments and approvals belong to the organization rather than to you personally, and remain with it. If you need particular content removed, write to privacy@krono.io; your administrator can also forward the request.
- Audit history. The record that an action happened is retained as the organization's evidence, with your identity detached from it. These records contain no names, email addresses, credentials or post content.
- Billing records. Invoices and payment records are kept by us and by our payment processor for as long as tax and accounting law requires.
- Anything already published. A post that has reached a social media platform lives on that platform. Members who may both approve and publish can delete a Facebook photo or album post from Kröno.io while its Page is connected; any other post must be removed on the platform itself.
- Instagram and TikTok accounts you connected. These connections are the organization's, and stay until someone disconnects them (below).
Deleted without anyone asking
- Invitations that lapse. An invitation that expires, is revoked or is declined keeps the invited address for 30 days after it closed; then the address is replaced so it no longer identifies anyone.
- Sign‑ups that were never confirmed. An address that was never confirmed, and never joined or created an organization, is deleted 7 days after it was entered.
Deleting an organization
When an organization is deleted, its content, media, campaigns, memberships, invitations, connected social accounts and their stored credentials are removed, we cancel its subscription with our payment processor, and its members lose access. Billing records are kept as described above. Deleting an organization doesn't ask the platforms to end Kröno.io's access: disconnect its Facebook Pages and TikTok accounts first (below), and remove Kröno.io - IG in Instagram, or remove Kröno.io in each platform's own settings.
Disconnecting a social account
You do not need to delete your account to do this. Disconnecting a connected account in the workspace deletes the access Kröno.io stored for it. The account's name, username and picture stay with the organization's post history.
- A Facebook Page. Kröno.io first asks Facebook to end its access, unless the same Facebook login is still connected, or being connected, to Kröno.io for another Page. It then deletes the stored access and the ID Facebook assigns to the person who connected the Page.
- An Instagram account. Kröno.io deletes the access it holds and the ID Instagram gives Kröno.io for the account. Instagram gives apps no way to end their own access, so to end it at Instagram, remove Kröno.io - IG in Instagram under Settings → Apps and websites.
- A TikTok account. Kröno.io first asks TikTok to end its access, then deletes the stored access.
You can also remove Kröno.io on Facebook, under Settings → Business integrations, or in Instagram as above, without disconnecting anything here first. Meta then tells Kröno.io, which deletes the access it stored, and the connection has to be reconnected (below).
Removing Kröno.io in Instagram or on Facebook
When you remove Kröno.io in Instagram, under Settings → Apps and websites, where it is listed as Kröno.io - IG, or on Facebook, under Settings → Business integrations, Meta tells Kröno.io. Kröno.io then deletes the access it holds for that Instagram account, or obtained through that Facebook login, in every organization that connected it, and marks each of those connections as revoked: it has to be reconnected, and posts scheduled to it stop. For a Facebook login, Kröno.io also deletes the ID Facebook assigns you. For an Instagram account, its name, username and picture stay, so the organization can see which account to reconnect, and so does the ID Instagram gives Kröno.io for it, so that a deletion request can still find it. A connection made again after Meta sent that notice isn't affected.
When you ask Instagram or Facebook to have Kröno.io delete your data, Meta passes the request to Kröno.io, which carries it out automatically. It deletes the same access and the ID the platform gives Kröno.io for you, unless that ID is also the Instagram account's own ID, which stays (below). For an Instagram account Kröno.io can still match to the request, it also deletes the account's name, username and picture. A connection made again after Meta sent the request isn't affected either. Kröno.io answers Meta with a confirmation code and a link to a Kröno.io page where the request can be checked.
After a deletion request, this stays:
- Posts already published. They stay on Instagram or Facebook; remove them there.
- The organization's record of what it published. For an Instagram account, it keeps the account's ID and each published post's ID and link, with no access, name or picture, so it still knows where its posts went. An account the organization had already disconnected, which Kröno.io usually can no longer match to the request, keeps its name, username and picture with its post history, as described above.
- Facebook Pages. The Pages, their names and their publishing history stay with the organizations that manage them, since they belong to the Page rather than to you.
- Audit history. The record that the access was removed, kept as the organization's evidence; it holds none of your Instagram or Facebook IDs and names no one.
- The request itself. A one‑way fingerprint of the confirmation code, which platform sent the request, and when it was received and completed, so that the link keeps working; and, for about a day, a one‑way fingerprint of Meta's signature on the request, so that the same request sent again changes nothing.