Meta data deletion instructions

Last updated: September 10, 2026

Purpose

This page explains how users, businesses, and tenant organizations can request deletion of data handled by Braluma through Meta, Facebook Login for Business, WhatsApp Embedded Signup, and WhatsApp Cloud API integrations.

Data covered

A request can include, when applicable:

account, contact, profile, and preference data stored by Braluma;
tenant organization, customer, applicant, or operational-unit records;
support, scheduling, message, and attachment history handled by Braluma;
Meta/Facebook technical identifiers such as Business ID, WhatsApp Business Account ID, Phone Number ID, authorization scopes, and connection status;
WhatsApp Cloud API message and delivery-status data received through webhooks when a tenant connects its official WhatsApp number through Meta.

How to request deletion

Send an email to dpo@braluma.com with the subject Exclusão de dados Braluma / Meta (Portuguese) or Braluma data deletion (English), matching the localized instructions.

Include only the information needed to locate the relevant account or connection:

full name or business name;
email address or phone number used with Braluma;
tenant organization or operational unit name, if applicable;
WABA ID, Phone Number ID, or Business ID, if the request relates to a Meta/WhatsApp connection and you have those identifiers.

Do not send passwords, access tokens, verification codes, full identity documents, or unnecessary sensitive information by email.

What happens next

Braluma will confirm the requester identity or authority.
The automatic Meta callback detaches only an exact matching Meta/Facebook sign-in link. It does not delete a global Braluma user, a shared WABA, a phone number, or a platform-owned connection.
Requests involving a WhatsApp tenant connection, access token, message, attachment, or other organization data are reviewed by the DPO and handled only after the requester and the affected asset are verified.
Braluma will delete or anonymize personal data that does not need to be retained for legal, accounting, anti-fraud, security, contract, or legal-claim reasons.
Braluma will respond within 15 days for requests in Portuguese (Brazil) and within 30 days for requests in English (Canada, excluding Quebec), unless applicable law allows a different deadline or additional information is needed to confirm the request.

Callback and instructions URLs

The automatic Meta data-deletion callback is /api/meta/data-deletion: it verifies the Meta signed_request and returns a confirmation code with a status URL. This page (/meta-data-deletion.html) is the registered data-deletion instructions URL for human requests through the DPO flow described above.