Data Deletion

dmconverts is operated by Flowstart Kft.. This page explains how Instagram data processed by dmconverts can be removed. See also our Privacy Policy.

For brands: disconnect Instagram

Sign in to dmconverts and open Settings → Instagram accounts, then choose Disconnect. This deletes the stored Instagram access token and stops every campaign of that account from sending messages; your campaign history stays so that you can reconnect later. To also erase the commenter data collected through the account, remove dmconverts from your Instagram account in Instagram's apps and websites settings (Meta then notifies us and we erase the data described below), or email us.

What a Meta data deletion request erases

When Meta sends us a data deletion request or a deauthorization for your Instagram professional account, we immediately:

• mark the Instagram account as disconnected, delete its access token and remove its username, display name and profile picture;
• delete the commenter records collected through that account (Instagram-scoped ids, usernames, consent and opt-out timestamps, email addresses given in DMs);
• delete the message delivery records of that account;
• delete the link click records tied to those commenters or deliveries;
• delete the raw webhook payloads received for that account.

Order attribution records (order id, amounts, currency, coupon code) are kept for your revenue reports, but their link to the commenter and the message is removed. Campaign settings stay in your workspace until you delete them or close your account. Meta shows you a confirmation code and a status link to this page; open that link to check the status of your request.

What we keep after an erasure

Erasure removes the personal data listed above. A few records stay, each for one purpose:

• The Instagram account id, a number without the username, name or picture, so that the account cannot be silently re-connected by another organisation.
• For each commenter who had opted out of messages: a one-way, keyed hash of their Instagram-scoped id, together with the account id and the opt-out date. This also applies when a brand erases a single commenter from its contact list. The hash cannot be turned back into the id; it only lets us recognise the same person again, so that someone who opted out is never messaged again, even if the account is connected later. Commenters who had not opted out leave no such record.
• The deletion request itself: its confirmation code, the Instagram user id Meta sent with the request (the account's Instagram id or its app-scoped id), whether it was a deauthorization or a data deletion request, and when it was received and completed. This record proves that the erasure took place and lets this page answer the confirmation code. The brand's workspace also keeps an audit log entry with the confirmation code, the account id, the Instagram user id from the request, the request type and the number of records erased, until the workspace is deleted.

These records are not deleted automatically: we keep them for as long as they are needed to prove the erasure and to honour opt-outs, also after the brand's dmconverts workspace has been deleted.

For commenters: ask for your data to be deleted

If you commented on or messaged an Instagram account that uses dmconverts, the brand behind that account decides how your data is used. Ask the brand directly to delete your data, or write to us at info@flowstart.eu with your Instagram username and the account you interacted with, and we will forward the request and help the brand complete it. You can stop automated messages at any time by replying STOP, NEM, NE, LEIRATKOZOM or UNSUBSCRIBE.

Verification and timing

We may ask you to verify that you control the Instagram account or email address before deleting data. Requests are handled without undue delay and at the latest within one month, unless we must keep certain records for legal, billing, fraud prevention or security reasons.

Contact us

Flowstart Kft., info@flowstart.eu