Meta Data Deletion Instructions

How to request deletion of data Cimplify received from Meta on your behalf.

Effective date: April 19, 2026

What data is covered

When you connect your WhatsApp Business Account, Facebook Page, or Instagram Professional account to Cimplify via Meta's Embedded Signup flow, we receive the following from Meta:

  • Your Meta user ID (the admin who authorised the connection)
  • WhatsApp Business Account ID, phone number ID, and display phone number
  • A long-lived access token (stored encrypted) used to deliver messages on your behalf
  • Facebook Page ID and Instagram Business Account ID (if connected)

This page covers the deletion of the authorising user's personal data. Deletion of end-customer conversation data (messages your customers sent to your business) is managed separately by the business that owns those conversations — see the Privacy Policy.

How to request deletion

Option 1 — Remove the app in Meta Business Settings (automated)

  1. Go to business.facebook.com/settings/apps
  2. Select the Cimplify app
  3. Click "Remove"

Meta will notify Cimplify automatically. We deactivate your connected channels immediately and your access token is retired. No further messages are sent through your account.

Option 2 — Email us directly

Send an email to [email protected] from the email associated with your Meta account, including:

  • Your Meta user ID (or the business name / WhatsApp number)
  • A statement that you request deletion of the data listed above

We respond within 30 days (usually much faster) and provide a confirmation code once the data has been removed from our production systems.

Check the status of a deletion request

If Meta forwarded a deletion request on your behalf, we return a confirmation code. Track the status at /v1/meta/data-deletion-status/<confirmation_code>. You can also paste the full URL we returned to Meta directly into your browser.

Retention exceptions

We may retain a minimal record (hashed identifiers, deletion timestamp) where required by applicable law, for fraud prevention, or to defend legal claims. This record does not contain your access token, phone number, or messaging content.