Data & account deletion

This page explains how to remove your data from Merlin. There are three separate things you might want, and they are not the same — read the one that matches your situation. If you are not sure, email privacy@disruptdigital.com.au and we will work it out with you.

Disconnect a platform connection

This removes Merlin's ability to read a connected platform — Google Ads, Google Analytics, Google Search Console, Google Business Profile, Google Calendar, Meta, Wix or Squarespace — and deletes the credentials we hold for it. Your Merlin account and your business records stay in place.

1. Sign in to Merlin

   Go to app.meetmerlin.ai and sign in with your email address and password.

2. Open Settings → Connections

   You will see every platform connected to your account, and which Google or Meta identity authorised it.

3. Disconnect the one you want removed

   Merlin revokes the token with the provider and deletes our stored copy. Reporting that depended on that connection stops filling with new data.

One important exception. If you previously asked us to establish a durable grant on a platform — linking your Google Ads account under our manager account, granting our reporting identity access to your Google Analytics property, or adding it as an owner of your Search Console property — that grant lives on the platform itself, not in Merlin. Disconnecting in Merlin does not remove it. Remove it in Google Ads, Google Analytics or Search Console directly, or ask us to remove it as part of off-boarding.

Google Calendar is personal. Each team member connects their own calendar, so each disconnects it themselves, from Settings → Connections or Booking → Settings. Merlin first removes the upcoming bookings it added to that calendar, then revokes access; bookings in the past stay in your calendar as a record.

Revoke Merlin's access at Google or Meta

You can also cut access off from the provider's side, without signing in to Merlin. This works even if you no longer have a Merlin login.

• Google — open myaccount.google.com/permissions, find Merlin in the list of apps with account access, and choose Remove access.
• Meta — open your Meta Business settings, go to the apps or integrations section for the business portfolio concerned, and remove Merlin.

Revoking at the provider stops us reading new data immediately. To also have the data we already hold deleted, send the request in section 3.

Delete an account and its data

Merlin accounts are provisioned by our team as part of a services engagement, so deletion is handled as a request rather than a self-serve button. We do this deliberately: an account usually holds records belonging to a business rather than to one person, and deleting it affects everyone who uses it.

How to ask

Email privacy@disruptdigital.com.au from the email address on the account, and tell us:

• the business name and the Merlin account it relates to;
• whether you want your own user removed, or the whole account and all of its data deleted;
• whether you need a data export first (see below).

If you cannot email from the account address, write to us at the postal details in section 6 and we will verify your identity another way. We will not action a deletion request we cannot verify — that protects your business from someone else deleting your records.

Export first, if you need it

Once services end, your business data stays available for export for 30 days before it is scheduled for deletion. If you want a copy, ask for the export in the same email — it is much easier before deletion than after.

What happens after you ask

1. We acknowledge your request

   Usually within two business days, confirming what we understood you to be asking for and flagging anything that needs a decision from you.

2. We verify who you are

   We check the request came from someone entitled to make it for the account. This is the step that most often needs a reply from you.

3. We revoke connections and remove platform grants

   Stored OAuth tokens are revoked at the provider and deleted. On request we also remove the durable grants we hold on your platforms — the manager-account links, analytics access bindings and Search Console owners described in section 1.

4. We delete the data

   Your account, users and business records are deleted, along with the backing records in our systems. We action deletion within 30 days of a verified request.

5. We confirm in writing, and tell you about anything retained

   If we are legally required to keep a specific record — invoices and other financial records have statutory retention periods under Australian law — we will tell you exactly what was retained and why. Nothing retained for that reason is used for any other purpose.

If a business used Merlin to store your details

If you are a customer of a business that uses Merlin — rather than a Merlin user yourself — then that business, not Disrupt Digital, decides what happens to your records. We process them on their behalf and on their instructions.

Contact that business directly first. You can also email privacy@disruptdigital.com.au and we will refer your request to them and assist with access, correction or deletion on their instruction.

Contact

Related: Privacy Policy · Terms of Service · How platform connections work