Data Deletion Instructions

1. What this covers

When you connect a Facebook Page, Instagram Business account or other Meta channel to a DigiMarketingOS workspace, we receive a limited set of data from Meta to operate the integration: your Meta user identifier, the connected Page or account identifiers, the access and refresh tokens needed to call the relevant APIs on your behalf, and any content or insights you explicitly import into the platform. This page explains how you can have that data deleted.

2. How to request deletion

You have two ways to trigger deletion of your Meta-connected data:

• Automatic (via Meta): From your Facebook settings, go to Apps and Websites, find DigiMarketingOS, and select Remove. Meta sends a signed deletion request to our callback endpoint (see below) and we begin removal within 24 hours.
• Manual (direct request): Email privacy@digimarketingos.com with the subject "Meta data deletion request" and your connected account details. We will verify your identity and begin removal within 24 hours.
• Self-service: Workspace owners can disconnect any channel and delete their workspace from account settings at any time, which removes the connected credentials and imported data.

3. What we delete

On a verified deletion request we remove, for the requesting user's Meta identity:

• The connected channel record and its encrypted OAuth access and refresh tokens.
• Content and insights imported from that channel (posts, analytics, audience data) unless retained for billing or legal reasons.
• Any cached profile, page or account metadata obtained from Meta.
• Audit-log entries are retained in a minimised form where retention is legally required, but with the Meta identifier removed.

4. What we do not delete

We do not retain your Meta password (we never receive it). We do not keep data that is necessary to keep for accounting, tax, fraud-prevention or security-log obligations. Where data must be retained, it is minimised and access-restricted. Email privacy@digimarketingos.com if you need details of what is retained for your case.

5. Timeline

Deletion of live data begins within 24 hours of a verified request and completes within 30 days, after which residual data is purged from encrypted backups. If a deletion cannot be completed for technical reasons we will inform you and continue attempts until complete.

6. Signed deletion callback

When you remove the app via Facebook, Meta sends a signed request to our registered deletion callback URL:

• Endpoint: https://www.digimarketingos.com/api/public/meta/deletion
• We verify the request signature using HMAC-SHA256 and our Meta app secret before any action is taken.
• On a valid request we record a confirmation code and begin removing the data associated with the Meta user identifier.
• We return a confirmation to Meta within 24 hours, as required by Meta's platform terms.

7. Verification and confirmation

Every deletion request is recorded with a confirmation code. If you contacted us manually, we will send that confirmation code to your registered email once deletion is complete. If you used the automatic Meta flow, the confirmation is returned to Meta as required.

8. Contact

For any data deletion question, contact our privacy team at privacy@digimarketingos.com. We respond within 30 days, and begin verified deletions within 24 hours.