Meta Data Deletion

StoryBam provides self-service controls to disconnect Instagram and delete the Meta-derived data associated with a connected professional account. You may be asked to sign in before accessing these controls.

If you are not signed in, you will be taken to the login page and returned to the control you selected.

1. Meta Data Deletion

This page explains how to remove the Meta and Instagram data that StoryBam holds for a connected professional account. Two operations are available and they are different:

• Disconnect Instagram removes the Meta connection and Meta-derived data from a business activity, while keeping the activity and your StoryBam login.
• Delete your StoryBam account starts deletion of your personal login. It is a separate action and does not, on its own, delete business records.

Both controls are self-service. You do not need to send an email to request deletion.

2. Disconnect Instagram

An account owner, or a user expressly authorised to manage Instagram, may disconnect the connected Instagram account of a business activity without closing the activity.

How to do it: open Manage connected Instagram accounts, select the activity’s More options menu, and choose Disconnect Instagram. The control is shown only when an Instagram account is connected and you are allowed to manage it. You will be asked to confirm before it runs.

Disconnecting attempts to unsubscribe the Meta webhook, then removes the stored access token and expiry, the Facebook and Instagram identifiers, the connected Instagram username and the raw connection payload, deletes the Instagram webhook/event records for that business, anonymises the Instagram identifiers on reward records, deletes temporary reward-card images and sets the connection status to deleted. The activity, its anonymised rewards, billing history and your StoryBam login remain.

3. Delete your StoryBam account

Deleting your personal login is available in your account settings, in the Danger zone section.

Personal login deletion starts a recoverable 14-day flow. Active sessions are revoked and your workspace memberships and preferences are removed immediately; the authentication user is deleted after the 14-day recovery window unless the account is restored first.

Any business activity you solely own is closed automatically as part of this flow: Instagram is disconnected, active campaigns end, unredeemed customer rewards are cancelled, campaign media is removed and the required tax/accounting snapshot is retained. Closed activities are not restored if you recover your login within 14 days — only your personal login, memberships and preferences are restored (Instagram must be reconnected and payment details may need to be entered again). An activity that has another primary owner is not closed: only your access is removed. Deleting your login does not delete businesses owned by other people.

4. What is deleted

A verified disconnection or a verified Meta deletion request removes the Meta-derived data held for the connected account:

• the stored Meta/Instagram OAuth access token and its expiry;
• the Facebook and Instagram identifiers (Facebook user and page, Instagram business, scoped and webhook account IDs) and the connected Instagram username;
• the raw connection payload held in the active connection;
• the Instagram webhook/event records associated with the connected business;
• the Instagram username and user ID on reward records, which are anonymised;
• the temporary reward-card images linked to those rewards;
• the connection itself, whose status is set to deleted so no further authorised processing occurs.

5. What may be retained

Deletion of Meta-derived personal data is different from deletion of independent business records. StoryBam may retain:

• an anonymised reward ledger (code status, campaign, issue/expiry/redemption timestamps and reward snapshot);
• business-authored campaign configuration and design revisions needed for reward history and disputes;
• invoices, tax, payment and accounting records for the legally required period;
• limited security, fraud or legal records where retention is necessary and lawful;
• the deletion and status audit record;
• data that may remain temporarily in encrypted or access-restricted provider backups and caches until their normal expiry cycle.

Retained records are restricted to the purpose requiring retention and are not used to reconnect the Instagram identity.

6. Verified Meta deletion requests

StoryBam can also process verified deletion requests received directly from Meta. Signed requests are validated before stored Meta or Instagram data is removed. Each valid request receives a unique confirmation code and a status page where completion can be checked. Invalid, malformed or unsigned requests are rejected and do not create a deletion record.

7. Security and completion

Meta deletion requests are verified server-side before any data is removed, and the signed request and access token are not copied into the deletion audit record. Deleted data may remain temporarily in encrypted or access-restricted backups until their normal expiry cycle, without being restored to ordinary use unless required for disaster recovery or law; if restored, the deletion instruction remains applicable. A status page or confirmation code identifies completion or explains any lawful limitation.

For general questions you may contact Rosetta Ventures FZ-LLC at info@storybam.com. More information is available in the Privacy Policy.