Legal

Data Deletion

Last updated: 2026-05-19

Three ways to delete your data

You can request deletion of the data 42flows holds about you in any of three ways. All three trigger a full purge within 24 hours.

1. From the 42flows dashboard (fastest)

  1. Log in at 42flows.com/login.
  2. Open your site detail page: Dashboard → Sites → [your site].
  3. To delete data from a single integration (Instagram, Google Search Console, etc.): scroll to the integration's card and click Disconnect. The token is revoked immediately and the connected data is purged within 24 hours.
  4. To delete everything: contact [email protected] requesting full account closure. All customer-identifying data is purged within 30 days per our Privacy Policy.

2. Revoke 42flows from inside Instagram

If you want to revoke 42flows directly from your Instagram settings:

  1. Open Instagram.
  2. Go to Settings & activity → Apps and websites → Active.
  3. Find 42flows.
  4. Tap Remove.

When you revoke from Instagram, Meta calls our deletion endpoint automatically. We purge your meta_oauth_connections record, all stored Instagram insights data (audience demographics, post performance, account-level metrics), and any cached audience data, within 24 hours. Meta receives a confirmation code that ties this deletion back to your revocation.

3. Email request

Send an email from the address associated with your 42flows account to [email protected] with the subject Data Deletion Request. Tell us which data you want deleted (Instagram only, all integrations, full account). We will confirm the request and complete the deletion within 24 hours for integration-level deletions, or within 30 days for full account closure.

What gets deleted

For Instagram and Meta data specifically:

  • Your OAuth connection record (encrypted token, expiry, scopes granted).
  • All Instagram performance data we stored (account-level reach, impressions, profile views, follower count, audience-by-city, demographics).
  • All per-post insights we synced (reach, engagement, saves, comments, video plays).
  • Any cached audience data used to render dashboards or reports.
  • References to your Instagram data inside our activity log are anonymized.

What we may retain: anonymized aggregate metrics that cannot be traced back to your account (e.g., "across all customers, accounts with X audience profile saw Y engagement"). Tax and invoicing records may be retained where law requires.

Programmatic endpoint (for Meta)

For Meta and other automated systems calling our deletion endpoint, the callback URL is https://42flows.com/api/auth/meta/data-deletion. It accepts a signed request from Meta, verifies the HMAC signature with our app secret, queues the deletion, and returns a JSON response with the confirmation URL and a confirmation code.

Questions

If you don't see your data deleted within 24 hours, or you have any other concerns: [email protected]. We respond within 1 business day.