IgInbox
Log in

Data Deletion Instructions

Last updated: 2026-11-07

In plain language

You can delete all of your data from IgInbox at any time — from your dashboard, through Instagram's settings (which triggers an automatic Meta callback), or by emailing info@iginbox.com. Deletion is permanent and includes all flows, contacts, messages, and encrypted Instagram tokens. Backups are purged within 30 days.

1. Your Right to Delete

You have the right to request deletion of all personal data associated with your IgInbox account at any time. We honour every deletion request promptly and transparently, in compliance with GDPR, CCPA, India's DPDP Act, and Meta Platform Terms.

2. How to Request Deletion

There are three ways to delete your data:

A

From your IgInbox dashboard

Go to Settings → Danger Zone → Delete All Data. This immediately removes all workspace data including flows, contacts, messages, and connected accounts. Your account is closed and you are logged out.

B

Via Instagram settings

Remove IgInbox from your connected apps in Instagram settings. This triggers an automatic data deletion callback from Meta. We verify the request using HMAC-SHA256, then immediately delete all data associated with that Instagram account.

C

By email

Email info@iginbox.com with the subject line "Data Deletion Request" and the email address associated with your account. We process email requests within 48 hours.

3. What Gets Deleted

When you request data deletion, the following is permanently removed:

  • Your account profile and authentication credentials
  • All connected Instagram account tokens (immediately revoked and destroyed)
  • Automation flows and flow version history
  • Contact records, tags, custom fields, and captured lead data
  • Conversation history and message logs
  • Workspace settings, team member associations, and role assignments
  • Audit logs, analytics data, and webhook event records
  • Any uploaded media in your workspace storage bucket

4. Deletion Timeline

MethodTimeline
Dashboard deletionImmediate
Meta callbackWithin minutes
Email requestWithin 48 hours
Backup purgeWithin 30 days

5. Meta Data Deletion Callback

In compliance with Meta Platform Terms, IgInbox implements a data deletion callback endpoint. When a user removes the IgInbox app from their Instagram or Facebook settings, Meta sends a signed request to our server. We:

  1. Verify the request signature using HMAC-SHA256 with our app secret
  2. Identify all data associated with that user's Instagram account
  3. Permanently delete all associated data from our active database
  4. Return a unique confirmation code and status URL where deletion progress can be verified

This endpoint is always available at https://iginbox.com/api/webhooks/meta/data-deletion

6. Data We May Retain

After deletion, we may retain only:

  • Anonymised analytics: Aggregated, non-identifiable usage statistics that cannot be linked back to you
  • Legal records: Transaction records required by law (e.g., billing invoices) for the legally mandated retention period

No personal data, Instagram tokens, messages, or contact information is retained after deletion.

7. Confirmation

After your data is deleted, you will receive a confirmation email at the address associated with your account. If you initiated deletion via Meta's callback, you can verify the status using the confirmation code and status URL provided by Meta.

8. Contact

For questions about data deletion or to submit a request, contact us at info@iginbox.com.