Data Deletion Instructions

1. Overview

RespoFire respects your privacy and provides straightforward mechanisms to manage and delete personal data and account integrations stored by our application, including data associated with your connected Instagram Business account.

2. How to Request Data Deletion

3. What Happens to Your Data

When a data deletion request is executed or triggered via Meta app removal, the following categories of application-stored data are deleted:

• Instagram Account Connections: Stored account bindings, Instagram Business ID mappings, handles, and profile metadata.
• Access Credentials & Tokens: OAuth access tokens are removed from active tables and tombstoned for complete deletion from Supabase Vault.
• Customer & Lead Records: Instagram customer profiles and associated CRM lead entries linked to the account.
• Conversations & Messages: Stored direct messages, comment threads, story replies, and interaction history.
• System Event Logs: Certain webhook and system event records may be retained for security and ingestion telemetry, with the deleted Instagram account identity unlinked where applicable.

4. Disconnecting Instagram App Access via Meta Settings

To revoke RespoFire's access to your Instagram account directly through Meta:

1. Open the Instagram app on your mobile device or web browser.
2. Navigate to Settings and activity → Website permissions → Apps and websites.
3. Under the Active tab, locate RespoFire.
4. Click or tap Remove.

Alternatively, you can remove the application permissions via your Facebook account settings under Settings & Privacy → Settings → Apps and Websites.

5. Deletion Processing & Timeframes

Automated deletion requests received via Meta app revocation are processed immediately upon receipt of Meta's verified callback.

6. Data Retained Where Required

In accordance with Meta Developer Policy requirements, an anonymous data deletion confirmation record containing a confirmation code and completion status is retained in our compliance log. This record is used to allow verification of the deletion request status and does not contain access credentials.