Data deletion

How to delete your data

Five steps, from disconnecting a single integration to erasing everything we hold. Each step works on its own — you do not have to go through all of them.

Disconnecting an integration stops data flowing. Deleting the account removes access to the data held in FIRMSET. An erasure request covers whatever is left, apart from records we are required by law to keep.

Step by step

What to click and in what order

  1. 1

    Disconnect the TikTok Shop account in FIRMSET

    Sign in and open Integrations, TikTok Shop, at /integracje/tiktok. Each connected account has two buttons.

    • “Disconnect” erases the access token and the refresh token issued by TikTok Shop, together with their validity dates. API calls for that shop stop immediately; your settings and the data already downloaded stay in place.
    • “Delete” removes the whole integration account from FIRMSET, and with it the list of authorised shops (shop id, name, region and the shop code used in API calls). The shop itself on TikTok is not affected.
  2. 2

    Revoke the authorisation on the TikTok Shop side

    In the TikTok Shop seller centre, open the list of installed applications and revoke the authorisation granted to FIRMSET. This is a separate switch from the one in our panel: it stops the application from obtaining a new token even if a token were still held anywhere.

  3. 3

    Delete the FIRMSET account

    In the profile settings there is a “Delete account” form. It asks for your password and it is irreversible: it ends the subscriptions and removes access to the data held in the account. Download the exports you need first — invoices as PDF, reports as CSV or XLSX.

  4. 4

    Ask us to erase the rest

    If, after the steps above, you want us to erase the remaining data related to you or to an integration, send us a request. Say which data or which integration it concerns, and write from the address assigned to the account so that we can confirm who is asking.

    Send erasure requests to: biuro@dashstack.pl

    Requests can also be sent by post to: Dash Stack sp. z o.o., ul. Generała Henryka Dąbrowskiego 18, 64-600 Oborniki, Poland

    How quickly we respond: We answer without undue delay and no later than one month from receiving the request, as required by Article 12(3) GDPR. If the matter is complex we may extend that by a further two months, telling you why. Handling a request is free of charge.

  5. 5

    Read what stays and why

    Some data survives an erasure request, because the law requires it. This is not a reservation invented for this page — the details are in the retention chapter of the Privacy Policy.

    Privacy Policy

Limits

What stays even after an erasure request

We say this up front, because a promise to erase everything would not be true.

Accounting records

Invoices and billing documents concerning fees for the service are kept for 5 years counted from the end of the calendar year in which the payment deadline fell. This period comes from tax and accounting law and we cannot shorten it at your request.

Evidence needed for claims

Data necessary to establish, pursue or defend claims is kept until the claims become time-barred.

Backups

Deletion from the production system is not immediately visible in backups. Backups are overwritten on a cycle; until they are, the copies remain protected and serve no purpose other than restoring the system after a failure.

Data held by the platform

Deleting data in FIRMSET does not delete anything on TikTok Shop or on any other connected platform. Those platforms are separate controllers and each has its own erasure procedure.

Who erases what

When we are the controller and when you are

For your own account data — your name, e-mail address, company details, billing records — we are the controller and we answer requests ourselves. For the data you enter into the application or download from a connected platform (contractors, customers, orders), the controller is your company and we act as a processor: we carry out your instruction. If someone sends us an erasure request concerning data of that second kind, we pass it to the customer who is the controller and let the sender know where it went.

Documents that describe this in full

The retention periods are set out in the Privacy Policy; the rules on exporting and deleting customer data are in Chapter 12 of the Terms of Service.