User data deletion

This page explains how Instagram-connected data is removed from Card Radar. Meta App Review can use this URL as the Data Deletion Request Callback / instructions URL.

How to request deletion

1. Email junyafujii2016@gmail.com from the address associated with the Instagram professional account.
2. Include the Instagram username and the Facebook Page name connected to that account.
3. We delete the stored access token, Instagram business account ID, and Redis seen-media records within 7 days, then confirm by email.

What is deleted

• META_ACCESS_TOKEN and INSTAGRAM_BUSINESS_ACCOUNT_ID hosting secrets.
• Upstash Redis key card-radar:seen-media.
• Any locally retained scan logs on the operator's machine.

What we cannot delete for you

Messages already delivered to Slack remain in that Slack workspace until the workspace admin removes them. OpenAI request logs follow OpenAI's retention policy. Instagram itself keeps the original public posts.

You can also disconnect Card Radar from Instagram in Instagram Settings → Apps and websites, which revokes the token on Meta's side.