Data Deletion

What data ISR holds

On behalf of a merchant, ISR holds:

• Their business profile
• Their connected Facebook Page ID and an encrypted Page access token
• The customer conversations and orders on that Page
• Product and inventory records

If you are a merchant

You can delete your data in either of two ways:

• Disconnect your Facebook Page in your ISR dashboard settings. This revokes the access token and stops all processing for that Page immediately.
• Email [email protected] to request full erasure of your business and every record attached to it.

If you are a Facebook user

If you are a customer who has messaged a merchant using ISR, removing the ISR app from your Facebook settings triggers Facebook's data-deletion callback, which ISR implements at /api/data-deletion. That callback verifies the request came from Facebook, then removes the data that identifies you — your name, Messenger ID, phone number, delivery address, and the content of your messages — while keeping the merchant's own order records (for their accounting) with nothing identifying you left on them. It returns a confirmation code along with a status URL you can visit to confirm completion.

Checking deletion status

The confirmation code you were given links to /deletion-status, which displays that reference back to you. It does not verify individual requests; to confirm a specific request, email [email protected] quoting the reference.

Timeline

All deletion requests, however they are submitted, are actioned within 30 days.