Legal

Data deletion

Delete a brand, a workspace, or your account, and decide whether Daoco keeps an anonymized record of the agent's work.

Effective Date: 2026-09-03

Daoco has three deletion scopes. A brand is one marketing tenant and everything it holds. A workspace is the billing and membership unit and every brand under it. An account is your login, your memberships, and, if you choose, the workspaces you own. Every deletion is verified by typing the exact name, recorded on a durable receipt, and carried out in bounded background steps. Access is blocked from the moment you confirm.

What is deleted

  • Brand:brand context and summaries, drafts, posts and their delivery records, campaigns, assets and files, chat threads and transcripts, automations and their runs, research, competitor and SEO data, connected-account records and credentials held by Daoco, vector indexes, and the brand's browser profiles at our browser provider.
  • Workspace:every brand in it, then the workspace's assistant configuration, channel connectors and credentials, assistant memories and automations, skill settings, memberships, the billing customer, and the WorkOS organization.
  • Account: your memberships, personal preferences, sidebar and dashboard state, browser profiles, your WorkOS login, and your product-analytics profile and its events. Workspaces you own are deleted as above when you tick that option. Content in workspaces owned by someone else stays with that workspace.

Deletion is permanent once processing begins and cannot be undone. Deleting a brand does not delete your login, the workspace, other brands, billing history, or the source account at a connected service.

Keep anonymized agent data

Every deletion confirmation asks one question: Keep anonymized agent data?The answer starts from your workspace's Help improve Daoco setting (Settings, Team tab, Privacy) and can be changed on the spot. If you keep it, Daoco retains two things under a random key that is not linked to you, the brand, or the workspace:

  • How the agent worked. Which runtime handled each request, which tools ran and in what order, how the run ended, and any rating you gave. Titles, notes, and references to your content are cleared.
  • A redacted copy of the conversation. Before a chat thread is deleted, Daoco copies its messages through a redaction pass that removes the brand and product names, the names and emails of workspace members, connected-account handles, and anything matching an email address, link, @handle, phone number, IP address, long number, or credential. Tool inputs and outputs are not kept, only the names of the tools used. A thread that cannot be read and redacted is deleted without a copy, and the receipt says so.

Redaction is deterministic and versioned; each retained record names the rules that produced it. It reduces but does not eliminate the chance that a free-text sentence describes a person or business in a recognisable way, so retained records are treated as confidential and used only to improve the Service. Leave the option off and all of it is deleted with everything else.

Delete one brand

A brand owner opens the brand's Settings, chooses Delete brand, types the exact brand name, answers the anonymized-data question, and confirms. If it is the only brand in the workspace, create another brand first or delete the workspace below.

Delete a workspace or your account

Signed-in workspace owners can start either deletion here. Each request gets a durable receipt, exact-name confirmation, the same anonymized-data choice, bounded cleanup, and provider-aware finalization.

Reading the receipt

The receipt shows the current stage, rows deleted, rows anonymized, conversations kept, and any retained-data exceptions. It reports Daoco workflow progress; it is not proof that a third party has physically erased its own security, billing, or backup copies.

What deletion cannot immediately erase

  • Provider backups and immutable operational logs that cannot be selectively edited; those copies age out under the provider's retention schedule and are not restored to active use.
  • Security, fraud-prevention, audit, transaction, tax, or other records retained where needed to comply with law or establish legal claims.
  • Data already sent to or created in a connected service. Disconnect or delete that data with the connected service as well.
  • Product-analytics identity deletion when the analytics provider's private API is unavailable; the receipt records it as an exception and we complete it by hand.
  • OpenRouter provider content from requests made under Daoco's zero-data-retention routing controls, because that content is not retained by eligible endpoints. OpenRouter may still retain non-content request metadata.
  • fal request JSON sent with storage disabled. Generated fal CDN media is requested with a one-hour expiration; copies saved in Daoco are handled through Daoco deletion.

Need help

For more detail, read our Privacy Policy and Terms of Service. If you cannot sign in, email support@daoco.org and we will verify your identity and run the same deletion for you.