Data Deletion

1. What Gets Deleted

When you submit a valid deletion request, we remove the following records:

• The Cloudflare KV entries associated with your Instagram-scoped user ID (rate-limit counters, any pending link tokens, deletion confirmation codes).
• Your conversation state and any cached profile in Botpress.
• Product-analytics events in PostHog that are tied to the hashed identifier derived from your Instagram-scoped user ID.

Deletion is irreversible. After deletion, the next message you send to @venio_app is treated as a new first-time interaction, and the Privacy Policy applies afresh.

2. Automatic Deletion Through Meta

Meta requires every Instagram application to support an automatic data-deletion callback. When you revoke Venio in the Instagram app (Settings → Security → Apps and Websites → Venio → Remove), Meta sends a signed request to our callback endpoint at https://venioapp.com/privacy/delete.

The callback verifies Meta's signature, enqueues a deletion job, and returns a JSON response with a confirmation URL and a unique confirmation code. You do not need to do anything else — the deletion is processed within 30 days and typically within 72 hours.

If you use the Meta flow and want to check the status manually, email privacy@venioapp.com with the confirmation code.

3. Manual Deletion by Email

If you cannot or prefer not to use the Meta flow, email privacy@venioapp.com with:

• Subject: Delete my data
• Your Instagram username (for verification against our logs)

We reply within 72 business hours to confirm receipt, and we complete the deletion within 30 days. No other information is required, and no fee is charged.

4. Timeline

The maximum time to complete a deletion request is 30 days, consistent with Article 12(3) GDPR. The typical time for automatic Meta-triggered deletion is under 72 hours. The typical time for email requests is 5 business days. If the request is complex (for example, you have multiple linked Instagram accounts), we may extend the period by up to two further months and notify you in writing with the reason, as permitted by Article 12(3) GDPR.

5. Confirmation and Status

For Meta-triggered deletions, the callback returns a unique confirmation code. You may check the status by visiting https://venioapp.com/privacy/delete?confirmation=<code>. The endpoint reports one of two states: deletion in progress or deletion complete.

For email deletions, we reply from privacy@venioapp.com when the deletion is complete and include the confirmation code you can retain for your records.

6. What We Retain After Deletion

After deletion, we retain only:

• Aggregate, non-identifying counts (for example, the total number of deletion requests per month). These counts cannot be reverse-engineered to identify you.
• Security logs with coarse metadata (IP range, timestamp, nothing that identifies you) for up to 90 days, strictly for abuse investigation.

Venio holds no financial or tax records about you, because the service is free. We do not retain any personal data for tax or accounting purposes.