Skip to main content

Legal & trust

Data deletion

Last updated: 29 September 2026 · In force since: 8 August 2026

1. Who this page is for

Businesses that connected a Facebook Page, an Instagram account, a WhatsApp Business Account or Facebook Lead Ads to Brand My Inbox or EmailPro, and people whose information one of those businesses keeps with us.

2. What we hold when you connect a Meta account

The identifiers of the accounts you connected (for WhatsApp, the WhatsApp Business Account ID and the phone number ID), the access token Meta issued to us for them, your message templates, and the messages sent and received through the connection, which appear on the contact's timeline in your workspace. For Facebook Lead Ads, the leads your forms collected.

We use this only to provide the features you switched on. We do not sell it and do not use it to train models.

3. Stop our access at Meta, at any time

In Meta Business Suite, open Settings, then Integrations, then Business integrations (for a personal Facebook login: Settings and privacy, Settings, Business integrations). Find Brand My Inbox and choose Remove.

Meta revokes our token immediately, and nothing new reaches us from that account. When our next call is refused we treat the connection as closed. Removing access does not by itself delete what we already hold; section 4 does that.

4. Ask us to delete your data

Email [email protected] with the subject "Data deletion request", from the address of the workspace's owner. Name the workspace or the domain, and say what to delete: the Meta connection and everything received through it, or your whole account.

We confirm we received the request within two business days. We may ask you to confirm your identity and your authority over the workspace, because deleting a business's data on the word of someone else would be its own harm.

We complete the deletion within 30 days and email you when it is done, with a reference you can quote.

5. What we may keep, and why

Invoices and payment records that tax law requires us to keep; security and audit logs, for the period stated in the Privacy Policy; and the suppression list entries that record that a person asked not to be contacted, because deleting those would let them be contacted again. Encrypted backups are not edited one record at a time; deleted data leaves them as they are replaced on their normal cycle.

6. If a business contacted you through us

If you messaged, or were messaged by, a business that uses Brand My Inbox or EmailPro, that business decides what is kept about you. Ask them first. You can also write to [email protected]: we will pass your request to the business and help them carry it out.