User Data Deletion Notice

When you submit a deletion request, we will delete or anonymize the following data related to you:

• The authorization and access token for your connected Instagram / Facebook account.
• Comment / DM content and conversation records we processed on your behalf.
• Contact identifiers such as Instagram user ID, username, and display name.
• Lead emails captured through your flows (if any).
• Flow configurations and operational analytics records associated with your account.

However, data we are legally obligated to retain (e.g., transaction / invoicing records) will be deleted only after the statutory retention period expires.

Irreversible binding fingerprints retained after account deletion: To prevent the same Instagram account from being reused to open multiple accounts, we retain a set of irreversible hash fingerprints even after you delete your account (each derived by a one-way hash of your email address and of your Instagram account identifier). These fingerprints contain no plaintext, cannot be reversed into the original data, and are used for nothing other than enforcing the binding limit. They are not the only records we retain after account deletion — the rest are listed in the next paragraph and in the data retention section of the Privacy Policy.

Other records retained after account deletion: Besides the binding fingerprints described in the previous paragraph, two kinds of records are not erased together with your account: invite code usage records (the primary key is the hash of the code itself, the table has no column pointing back to you, and it only stores that code’s usage counts), and billing mandate records (kept for reconciliation and statutory accounting evidence, and so that an authorization that has not yet been terminated can still be terminated). Neither contains plaintext personal data such as your name or email address. They are not cleared automatically by the “self-service deletion in the Dashboard” or the “revoke access via Instagram / Facebook” methods in Section 2 of this page; if you would still like us to handle them, use the “request by email” method in Section 2.

• Self-service deletion in the Dashboard: Sign in to the Dashboard and, under “Account Settings,” disconnect Instagram or delete your account; the system will then initiate deletion of the corresponding data.
• Request by email: Email support@shadowos.ai with the subject line “Data Deletion Request,” and provide your registered email or Instagram account so we can verify your identity.
• Remove authorization via Instagram / Facebook: After removing the “MiaoHui” authorization under “Settings → Apps and Websites” on Instagram / Facebook, Meta will automatically notify us to delete your data (see Section 4 below).

After we receive and verify your request, we will complete the deletion or anonymization within 30 days. Once complete, previously collected content cannot be recovered.

Under Meta’s platform policy, when a user removes this app’s authorization on Instagram / Facebook, Meta sends a signed deletion notice to our callback endpoint. We handle it as follows:

• Meta sends a signed signed_request to our endpoint: /api/data-deletion.
• We verify the signature using the App Secret to confirm the request genuinely comes from Meta.
• Once verified, we initiate deletion of the user’s related data and return a confirmation code along with this page’s URL.
• You can visit this page with the confirmation code at any time (/legal/data-deletion?code=…) or email us to check deletion progress.