data deletion

No account. No sign-in. No wait.

You commented on somebody’s post and a message arrived. You never signed up for anything, so there is nothing to sign in to — and that must not be the reason a request is hard to make.

Three routes

Any one of them works, and the third does not involve us at all. Which one you want depends on whether you commented on somebody’s post or run the account yourself.

You commented and got a reply

Email [email protected] with the subject “Data deletion”.

Include the Instagram handle you comment from. That is all we need to find your records — we hold no other identifier for you, which is also why you do not need to email from any particular address. We confirm within 30 days that it is done.

You are a business using the service

Email the same address from the address on your account.

We can either export everything held for your organisation, or delete it entirely. Deletion removes the whole organisation: the connected Instagram account and its stored token, your automations, every record of what was sent, your team’s sign-in accounts, and your history. It cannot be undone.

Revoke access from Instagram instead

Without contacting us at all.

Instagram app → Settings and privacy → Website permissions → Apps and websites → find this app and choose Remove. That immediately stops all future access. It does not by itself delete data already held, so email us as above if you want that too.

What to ask for

Three choices, and the middle one is the one most people mean. Say which in your email, or pick it in the form below; if you say nothing, we treat it as the middle one and tell you so in the reply.

Delete everything you hold about me: Every record tied to your Instagram-scoped ID is removed — the comment, the execution, the message that went out, any tag. One record is kept on purpose, and only if you opted out: see below.
Stop messaging me, but keep the opt-out record: The usual choice, and the safest one. You are never messaged again by that account, and the record of that instruction survives.
Just tell me what you hold: A copy of every record tied to you, and nothing is changed.

Why the opt-out record is kept

Deleting everything sounds like the most respectful option and, in this one case, it is the opposite. The record that you asked not to be contacted is what stops you being contacted. Remove it and the next time you comment on that account, nothing knows you said stop.

So it is kept unless you specifically ask for it to go as well. It contains your Instagram-scoped ID and the fact of the refusal, and it is used for nothing else. If you want it removed too, say so plainly and it will be — and you should know that the protection goes with it.

What deletion actually does

Deletion is carried out against the database, not by marking a row hidden.
Records tied to you are removed, and records that reference them are removed with them.
We do not retain a shadow copy for analytics.
We do not sell or share data with anyone who would hold a copy we could not reach.
We confirm within 30 days that it is done, and say what was removed and what was kept.

Write the request

This opens your mail app with the subject and the questions already in it. It needs nothing from us to be working, which is why it is listed first.

The privacy policy sets out what is held in the first place and for how long.