← Back to Home
Data Deletion Policy
Last Updated: December 20, 2025
1. Overview
This Data Deletion Policy explains how XStellar Systems handles data deletion requests for users of our AI-powered Instagram direct message lead qualification service ("Service").
This policy complies with:
- Meta Platform Data Deletion Requirements
- General Data Protection Regulation (GDPR)
- California Consumer Privacy Act (CCPA)
- Information Technology Act, 2000 (India)
2. What Data We Collect
2.1 Account Data
- Name, email address, business name
- Subscription and payment information
- Account settings and preferences
2.2 Instagram Data
- Instagram User ID (IGSID)
- Instagram Business Account information
- Access tokens and authentication credentials
- Instagram direct messages sent to your account
- Message sender information and metadata
2.3 Processed Data
- AI-generated lead scores and classifications
- Extracted lead information
- Qualified leads stored in Airtable
- Slack notification logs
3. Your Right to Delete Data
You have the right to request deletion of your personal data at any time. We will honor deletion requests in accordance with applicable laws and our contractual obligations.
4. How to Request Data Deletion
4.1 Through Your Account
- Log into your XStellar Systems account
- Navigate to Account Settings
- Click "Delete Account" or "Request Data Deletion"
- Confirm your request
4.2 Via Email
Send an email to support@xstellar.systems with:
- Subject line: "Data Deletion Request"
- Your registered email address
- Instagram Business Account username (if connected)
- Specific data you want deleted (if partial deletion)
4.3 Instagram App Authorization Page
If you disconnect our app through Instagram's authorized apps settings, we will automatically delete your Instagram access tokens within 24 hours.
5. What Data Gets Deleted
5.1 Immediate Deletion (Within 24 Hours)
Upon receiving a deletion request, we immediately delete:
- Instagram Access Tokens: Revoked and deleted from our systems
- Instagram Authentication Data: All OAuth credentials removed
- Active Processing Queues: Any messages currently being processed
5.2 Standard Deletion (Within 30 Days)
The following data is deleted within 30 days:
- Account Information: Name, email, business details
- Instagram Messages: All processed Instagram DMs
- Message Metadata: Sender information, timestamps, engagement data
- AI Processing Logs: Records of AI analysis and scoring
- Notification Logs: Slack notification history
5.3 Extended Retention (30-90 Days)
Some data may be retained longer for specific purposes:
- Billing Records: Retained for 90 days for accounting and tax compliance
- Legal Compliance Data: Retained as required by law or court order
- Security Logs: Anonymized logs retained for fraud prevention
6. Data NOT Automatically Deleted
6.1 Third-Party Systems
Data stored in systems you control will NOT be automatically deleted:
- Airtable Leads: Leads in your Airtable workspace remain under your control. You must delete them manually or contact Airtable.
- Slack Messages: Historical notifications in your Slack workspace must be managed by you.
We can provide guidance on how to delete this data from third-party platforms upon request.
6.2 Anonymized Data
We may retain anonymized or aggregated data that cannot be linked back to you for service improvement and analytics. This data is not considered personal data under most privacy regulations.
7. Data Deletion Timeline
| Data Type |
Deletion Timeline |
| Instagram Access Tokens |
Within 24 hours |
| Active Processing Data |
Within 24 hours |
| Instagram Messages |
Within 30 days |
| Account Information |
Within 30 days |
| AI Processing Logs |
Within 30 days |
| Billing Records |
90 days (for compliance) |
| Anonymized Analytics |
Retained (non-personal data) |
8. Confirmation of Deletion
After processing your deletion request:
- You will receive a confirmation email within 48 hours acknowledging your request
- Once deletion is complete (within 30 days), you will receive a final confirmation email
- You can request a deletion report by emailing support@xstellar.systems
9. Data Export Before Deletion
Before deleting your account, you can request a copy of your data:
- Email support@xstellar.systems with subject "Data Export Request"
- We will provide account information, processed message history, and lead scores in CSV/JSON format
- Export delivered within 7 days
Note: Instagram message content may be subject to Meta's policies and may not be exportable in all jurisdictions.
10. Contact for Deletion Requests
Primary Contact:
Email: support@xstellar.systems
Subject: "Data Deletion Request"
Expected Response Time:
- Acknowledgment: Within 48 hours
- Completion: Within 30 days
- Urgent requests: Contact us for expedited processing
Website:
https://xstellar.systems/data-deletion
11. Meta Platform Compliance
This Data Deletion Policy meets Meta's Platform Data Deletion Requirements for Facebook and Instagram Platform apps. We ensure:
- Users can request data deletion via URL or email
- Confirmation provided within 48 hours
- Deletion completed within 30 days
- Deletion callback URL available for Instagram app deauthorization
Data Deletion Callback URL:
https://xstellar.systems/api/data-deletion-callback
By using our Service, you acknowledge that you have read and understood this Data Deletion Policy.
XStellar Systems
Email: support@xstellar.systems
Website: https://xstellar.systems