Microsoft 365 data deletion

Last updated date:

How to stop Microsoft 365 access and delete synchronized Microsoft 365 data from Seedling.

1. Disconnect Microsoft 365 in Seedling

Disconnecting one personal connection removes only that member's connection, sources, and audience contributions. An independently observed object remains only when another active connection still observes it, with access recomputed from the remaining connection.

  1. Sign in to the Seedling workspace as a workspace administrator.
  2. Open Apps or Connections, select the exact Microsoft 365 connection, and choose Disconnect.
  3. Confirm the request. Seedling stops new synchronization, captures the exact connection and source identifiers, deletes active credentials or connection secrets, and starts a durable purge.
  4. Wait for the disconnect operation to report completion before reconnecting Microsoft 365.

2. Retire access in Microsoft 365

Revoke the application's resource grants and remove or disable the Enterprise Application or app registration in Microsoft Entra.

Also disconnect Microsoft 365 in Seedling to remove the selected sources and begin deletion of synchronized Microsoft content.

3. Request deletion without workspace access

Email privacy@tryseedling.ai from a work address associated with the organization. Include the organization name, Seedling workspace name if known, the Microsoft 365 account identity, and your authority to request deletion. Never include credentials, customer content, or identity documents unless Seedling provides a secure method.

Seedling verifies identity and authority before acting and will explain any information needed to locate the tenant safely.

4. What the purge removes

Disconnecting does not delete or modify the original information in Microsoft 365. Approved Seedling configuration may retain a bounded approval record, but its Microsoft 365 evidence and source-derived content are removed or redacted.

  • Encrypted Microsoft 365 credentials or connection secrets and the tenant connection record.
  • Microsoft 365 sources, provider staging rows, synchronization state, and audience contributions owned by the connection.
  • Outlook messages and events, OneDrive and SharePoint sites, drives, files and permission evidence, Teams teams, channels and channel messages, and directory context held by Seedling.
  • Source objects, chunks, embeddings, identifiers, and source-linked activity, fieldwork, chat, exploration, and verification evidence owned by the integration.

5. What may remain

Backups
Deleted information may remain in encrypted, access-restricted backups until expiry, ordinarily within 35 days after active-system deletion. It is deleted again if a backup is restored for disaster recovery.
Lifecycle audit
Seedling may retain workspace and connection identifiers, action, outcome, bounded reason codes, and timestamps needed to demonstrate deletion and protect the Service. These records contain no Microsoft 365 credentials or native payloads.
Legal and security records
Limited records may be retained longer when required for security, fraud prevention, disputes, accounting, or law.

6. Confirmation and related guidance

Seedling will confirm receipt of an emailed deletion request and provide a completion or decision notice after verification and processing. Questions may be sent to privacy@tryseedling.ai; product troubleshooting may be sent to support@tryseedling.ai.