Deleting the data we received from Facebook and Instagram
This page explains how you ask us to delete the data the service Socials Copilot received from Meta when you connected a Facebook Page or an Instagram professional account, and what is deleted when.
When a person connects accounts with Facebook Login, the service receives and keeps:
- the person's Facebook user identifier and an access token that lets the service act for them, stored encrypted;
- the Facebook Pages the person chose to share, with the Instagram professional accounts linked to them: their identifiers, names and usernames, and an access token for each Page, stored encrypted;
- for every post the service publishes: the identifier and link Facebook or Instagram gave it, and each answer of the platform to a publishing attempt;
- the results of the published posts and of the connected accounts: views, reach, interactions, follows and followers.
The service never shows an access token, never returns it through its API and never writes it into a log.
2. Disconnecting a channel in the service
A person who manages a brand opens the brand's Channels page and disconnects the channel. At that moment:
- the channel's access token is deleted;
- the service stops publishing to the channel and stops reading its results;
- the results already read for the channel and its posts are deleted.
The channel's name and the posts published to it stay in the organization's history so that the organization keeps a record of what it published, until the organization is deleted (section 5). The results of a channel that stays connected are deleted two years after the period they describe.
3. Removing the app in your Facebook settings
In Facebook, open Settings and privacy, Settings, Business integrations (or Apps and websites), find 7ier Social, the Meta app through which Socials Copilot connects, and remove it.
- Removing the app makes Meta tell us at once. We mark every channel you connected as having lost its access, delete their access tokens and tell the brand's managers that the channel needs to be connected again.
- Asking for your data to be deleted while removing the app makes Meta call our deletion address. We then delete at once every connection of your Facebook account, with its access token and the list of your Pages, and disconnect every channel connected through it, deleting its access token and its results as in section 2. Meta shows you a confirmation code and a link to a confirmation page of ours, which confirms that the deletion is done and when.
To answer that page, we keep a record of the request: a one-way hash of your Facebook user identifier, the confirmation code, the number of connections removed and the time.
4. Writing to us
You can also ask through the contact form at /contact, with the topic "My personal data". Tell us the Facebook Page or Instagram account concerned. We answer within one month.
- The data about you as the person who connected an account, your Facebook user identifier and the access token, we delete ourselves.
- Posts, media and results belong to the organization that uses the service; it decides about them as the controller (see our privacy notice). We pass your request to its owners and administrators and tell you that we did.
5. Deleting a whole organization
An owner of an organization can delete it on its Data page. The deletion takes effect 30 days after the request; then all of the organization's data, including everything received from Meta, is deleted, except the records the law requires us to keep, listed in the retention schedule of our privacy notice.
6. Posts already published
Deleting data in the service does not delete posts already published on Facebook or Instagram. Delete those on Facebook or Instagram themselves.