This page describes how to request that Toolwise delete data associated with a Meta account, a connected Facebook Page, an Instagram Business account, or any other identifier the platform may hold. Per Meta Platform Terms (Section 5.b), this URL is the designated user data deletion contact.
What Toolwise stores per Meta connection
- Page or Instagram Business account ID, name, username, follower count, profile picture URL.
- Long-lived Page Access Token (encrypted at rest with AES-256-GCM).
- List of permissions (scopes) granted by the authorizing user.
- Timestamps of when the connection was established and last verified.
- Posts created via Toolwise that were published to that account, including caption, hashtags, attached media, and Meta-issued post IDs (used for fetching post insights).
How to request deletion — Method 1: in-app disconnect
The fastest method (available to the operator):
- Sign in to Toolwise at https://kabir.toolwise.tech.
- Navigate to /social/accounts.
- Click the disconnect (trash icon) action on the relevant connected account.
- The SocialAccount row, including its encrypted access token and any cached metadata, is deleted from the database immediately.
- Published posts (and their externalPostId references) remain in Toolwise as historical records. To delete those too, also delete each ContentPost from /content.
How to request deletion — Method 2: email request
If you are not the operator (i.e. you are a Meta user whose page was connected to Toolwise without your knowledge, or you wish to verify deletion has occurred), email:
mail@kabirhafeez.co with the subject line Toolwise Data Deletion Request and include:
- The Facebook Page ID, Instagram username, or Meta user ID you are requesting deletion for.
- Proof of ownership / admin rights to that page (a screenshot of Meta Business Manager showing the page under your control is sufficient).
Requests are honored within 7 business days. A confirmation email is sent once deletion is complete.
What gets deleted
- The SocialAccount row and its encrypted page access token.
- Cached follower count, profile picture URL, and other public metadata fetched from Meta.
- On request: ContentPost rows that referenced this account, their attached media in Cloudflare R2, and their database history.
- On request: the agent’s memory entries that referenced this account by name.
What does not get deleted (and why)
- Posts that have already been published to Facebook or Instagram remain on those platforms — Toolwise cannot delete them via the Graph API after the fact, nor would it have authorization to. To remove published posts, use Meta Business Suite directly.
- Aggregated audit log entries that do not contain personal data (e.g. “account disconnected” records without identifiers) are retained for 90 days for operational diagnostics.
Contact
Kabir Hafeez
Email: mail@kabirhafeez.co
Web: https://kabirhafeez.co