Deleting your data

An access token for each connected Page or Instagram Business account, encrypted at rest using AES-256-GCM. This is what lets us publish on your behalf, and it is the only credential we hold.

Basic account identifiers: the Page or Instagram account ID, its handle and display name, and its profile picture URL — so you can tell your connected accounts apart in the app.

The Meta user ID of the person who authorized the connection. We store it for one reason: so that when Meta tells us that person has removed Flowtus, we can find every account they authorized and revoke it.

Content you create in Flowtus and publish through these accounts: post text, scheduled times, uploaded media, and the delivery outcome of each post.

Performance figures we sync back for your reports: impressions, reach, likes, comments, shares, and follower counts.

We do not store your Facebook or Instagram password, we never receive it, and we do not read your private messages.

In Flowtus, go to Accounts, find the account, and choose Disconnect.

This immediately deletes the stored access token and marks the connection revoked. Flowtus can no longer publish to, or read anything from, that account.

Posts you already published stay on Facebook or Instagram — they belong to your account, not to us, and only you can remove them from the platform itself.

You can also do this without opening Flowtus at all. In Facebook, go to Settings & privacy → Settings → Apps and Websites, find Flowtus, and remove it.

Facebook notifies us automatically, and we revoke and delete the stored tokens for every account that person authorized — across every workspace, not just the one they were last using.

We record the request and issue a confirmation code, and Facebook shows you a link where you can check that the deletion completed.

Disconnecting removes the link to Facebook and Instagram. If you also want your Flowtus account and its contents gone, request account deletion from your organization settings, or email privacy@flowtus.io.

This removes your personal data, your posts and their media, and your connected-account records.

Disconnecting an account, and the automated deletion Facebook triggers, both take effect immediately — the token is erased as part of the request, not queued for later.

Uploaded media is removed by our scheduled cleanup, which runs continuously; media attached to posts is deleted once no active post needs it and your organization's retention window has passed (30 days by default).

Full account deletion completes within 30 days.

We keep a minimal, non-content audit record that a deletion happened — the request, its confirmation code, and when it completed. We keep this precisely so we can prove the deletion took place, and it contains none of the data that was deleted.

For Meta's review: Flowtus implements Meta's data deletion callback at https://api.flowtus.io/webhooks/meta/data-deletion, and the deauthorize callback at https://api.flowtus.io/webhooks/meta/deauthorize.

Both verify Meta's signed request against our app secret before acting, so no unauthenticated caller can trigger or forge a deletion.

Each request returns a confirmation code and a status URL, at https://api.flowtus.io/webhooks/meta/deletion-status/<code>, which shows whether that deletion has completed.

Repeating a callback is safe: a second identical request affects nothing, so a retry from Meta can never cause a partial or double deletion.

If anything here is unclear, or a deletion has not happened the way this page describes, contact privacy@flowtus.io and we will answer.