User Data Deletion

Octaneon respects your right to remove your data from our systems. This page explains how to request deletion of information Octaneon obtained from Meta (Facebook and Instagram) and other connected sources, in compliance with Meta Platform Terms and applicable data- protection laws.

What we store from Meta

When you (or a brand admin acting on your behalf) connect a Facebook or Instagram account to Octaneon, we store, only for as long as the connection is active:

Encrypted OAuth access and refresh tokens.
The Facebook User ID, Page ID, and/or Instagram Business Account ID that was connected, plus display handles.
The list of scopes you granted.
Content and metrics you asked Octaneon to ingest (posts, engagement metrics, comments) for the connected Page or account, including the names and handles of people who commented.
Raw Facebook and Instagram API responses, retained as an archive so we can reconcile what we ingested.
Copies of your Page's images and video in our own object storage.
Any Facebook or Instagram "Download Your Information" archive an operator uploaded to Octaneon.
Page-level performance figures also held by our metrics subprocessor, Windsor.ai.

Option 1 — Self-service removal (fastest)

Sign in to Octaneon and open Brand → Integrations.
Find the Meta (Facebook & Instagram) card and click "Disconnect".
Octaneon will immediately revoke the grant at Facebook, delete the stored tokens, and delete the Facebook Page and Instagram Business Account rows associated with that connection.

You can additionally remove Octaneon from your Meta account at any time by visiting Facebook Settings → Business Integrations and removing Octaneon. Meta will send us a deletion signal, which we honor as described below.

Option 2 — Email a deletion request

If you cannot sign in, or you want Octaneon to delete data associated with a Facebook User ID you no longer control, email privacy@octaneon.ai with the subject line "Facebook Data Deletion Request" and include:

Your Facebook User ID, Page name, or Instagram handle.
The email address you used to sign in to Octaneon, if any.
A short statement confirming you want your Meta-derived data deleted.

We will confirm receipt within two business days and complete deletion within 30 days, subject to any legal retention obligations. We will notify you when the deletion is complete.

Option 3 — Automatic deletion callback (Meta Platform)

Meta may send Octaneon a Data Deletion Callback when a user removes our app from their Facebook settings. When we receive a valid callback we:

Delete the stored OAuth tokens, the Facebook User ID, and the names and handles of anyone whose comments we collected.
Delete the Facebook Page and Instagram Business Account rows keyed to the user's ID.
Delete every raw Facebook API response we archived, every Facebook or Instagram "Download Your Information" archive uploaded to Octaneon, and our cached copies of your Page's images and video.
Keep your Page's own posts, captions and performance history with every name, handle and account identifier removed from them, and remove that content from the Octaneon interface.
Deleted records may persist in routine backups for up to 30 days, after which they rotate out.

Our reply to Meta carries a confirmation code and a status URL of the form https://octaneon.ai/data-deletion/status/<code>. That page is public — the code is the only key to it — and shows where the request has got to:

Request received — we are revoking access now.
Access revoked — the tokens are deleted; removal of the associated data is pending review.
Approved — the removal is queued or in progress.
Completed — the removal finished, on the date shown.
Completed with exceptions — most of the removal finished; what remains is named and is still being retried.
Declined — we did not carry out the removal, with the reason stated.
No data found — we hold nothing we can match to that account. Use Option 2 and we will look it up by hand.

Whatever the outcome, the access revocation happens first and is never conditional on that review. We complete the data removal within 30 days of the request.

Meta requires that we publish this deletion instructions URL. You are reading it. If Meta support asks for a "Data Deletion Instructions URL" during App Review, use https://octaneon.ai/data-deletion.

What we do not delete

Records we are required to keep by law, such as tax or fraud-prevention records.
Aggregated or de-identified analytics and content that no longer identify you or any other individual. This includes a brand's own posts, captions and performance history once every name, handle and account identifier has been removed from them.
Content published on Meta itself — Meta controls that data. Delete it through your Facebook or Instagram account.
Content a different administrator of the same Page later re-imports. Removing your authorization removes your identifiers and stops our access under your grant, but another admin who connects the same Page afterwards re-ingests its posts under their own authorization. Your account identifiers do not come back with it.

Contact