User Data Deletion Instructions
How to disconnect connected social and advertising accounts (including Meta, Facebook, Instagram, and TikTok) and how to request deletion of personal data held by Glancers.
Overview & Scope of Data Processed
When you use Glancers or authorize a social or advertising integration—such as Glancers Ads Connect Composio, Meta Direct, or TikTok Direct—different categories of data are handled by Glancers, our managed OAuth provider (Composio), and the external platform (such as Meta). Understanding these roles helps you choose whether to disconnect an integration, request data deletion from Glancers, or manage your data on the external platform.
1. Data Held by Glancers
Glancers stores your platform account profile (name, registered email, username, role) and, when you connect a social or advertising account, connection metadata in our tenant-isolated database: the integration provider (composio, meta_direct, or tiktok_direct), platform name, connection status (active, expired, revoked, or error), granted OAuth scopes, external account/asset identifiers and display names, authorization/revocation timestamps, short-lived OAuth state records, and security audit logs. For direct OAuth connections, encrypted token ciphertexts are stored at rest and wiped immediately upon disconnection. When you view advertising or page dashboards, Glancers retrieves read-only performance insights on demand for your authorized account.
2. Data Managed by Composio (Managed OAuth Broker)
When you connect an account through Glancers Ads Connect Composio (Managed OAuth), Composio hosts the authorization handshake and manages the underlying OAuth credentials associated with your connected account identifier (provider_connected_account_id). When you disconnect a Composio-managed account from Glancers, Glancers sends an authenticated deletion and revocation request (DELETE /connected_accounts/{id}?revoke_on_delete=true) to Composio and marks the local Glancers connection record as revoked.
3. Data Held Independently by Meta (Facebook, Instagram & Meta Ads)
Meta Platforms, Inc. independently controls your Facebook profile, Facebook Pages, Instagram Professional accounts, Meta Business Manager assets, ad campaigns, and billing records under Meta's own terms and Privacy Policy. Glancers only accesses authorized data according to the permissions you grant and cannot delete or modify records held inside Meta's own platform.
1. How to Request Data Deletion from Glancers
You can request the deletion of your connected social/advertising integration data or your Glancers account personal data through our verified support channels below. You do not need to be logged in to submit a deletion request.
Option A — Submit a Tracked Online Request (Recommended)
Open the official Glancers Contact & Support form with the User Data Deletion topic pre-selected, enter your name and registered Glancers email address, and describe whether you want to delete connected Meta/social integration records or your entire Glancers account. Submitting this form creates a tracked case with a unique Ticket Number (TKT-...) reviewed by authorized Glancers support and compliance staff.
Option B — Send an Official Email Request
Send an email from the email address registered on your Glancers account to [email protected] with the subject line "User Data Deletion Request".
Option C — Use the Glancers Support Center
If you are signed in to your Glancers account, you can also open a tracked account support ticket directly through the Glancers Support Center.
2. Information to Provide in Your Request
To help us locate your account and protect your data against unauthorized deletion requests, please include only the minimum required identification details:
- The registered email address associated with your Glancers account (and your Glancers username, if known).
- The scope of your request: specify clearly whether you are requesting (a) deletion of connected Meta / social advertising integration data only, or (b) deletion of your full Glancers user account and personal data.
- Optional: the platform name (for example, Facebook, Instagram, Meta Ads, TikTok, LinkedIn, X, or YouTube) and the display name or external account ID of the connected social or ad account.
Security Notice — Never Share Passwords or Access Tokens
Never include your Glancers password, Meta password, OAuth access tokens, refresh tokens, app secrets, national ID images, or full payment card/bank credentials in any form, ticket, or email. Glancers staff will never ask you for your password or raw OAuth tokens.
3. Connected Social & Advertising Accounts: Disconnect vs. Data Deletion
Disconnecting an OAuth integration and requesting personal data deletion are separate actions with different technical effects:
A. Disconnecting an Account in Glancers Settings (Immediate Access Revocation)
Signed-in users can go to Account Settings > Connected Accounts at any time, click Disconnect next to a connected platform account, and click Confirm Disconnect. This action immediately marks the connection as revoked in Glancers, wipes any locally stored encrypted OAuth tokens and page tokens, instructs the upstream provider (Composio or Meta/TikTok Direct) to revoke/delete the active authorization, and prevents Glancers from making any further API calls on behalf of that social or advertising account.
B. Removing App Authorization Directly in Meta (Facebook / Instagram Settings)
You can also revoke Meta permissions at any time directly inside your Facebook account under Settings & Privacy > Settings > Apps and Websites (or Business Integrations) by removing Glancers Ads Connect Composio (or any Glancers integration). Revoking permissions in Meta immediately invalidates the OAuth authorization on Meta's servers.
C. Requesting Deletion of Stored Records
While disconnecting an account stops active access and clears stored OAuth tokens, non-secret connection audit logs and your Glancers user profile remain on record unless you submit a User Data Deletion Request through Section 1 above. Disconnecting or requesting deletion in Glancers does not automatically erase data held independently by Meta or third-party providers outside the revocation APIs described above.
4. What Happens After You Submit a Deletion Request
1. Case Registration & Reference Number
Requests submitted via the online form or Support Center are logged in the Glancers support system with a unique Ticket Number (TKT-...) and routed to authorized support and compliance administrators.
2. Identity Verification
Consistent with Section 7 of the Glancers Privacy Policy, we take reasonable steps to verify your identity before acting on a deletion request—such as confirming that the request originates from your registered email address or an authenticated account session—so that no third party can maliciously erase your account.
3. Fulfillment & Account Lifecycle Processing
Once your identity and request scope are verified, authorized staff process the request: for integration-data requests, active social/advertising connections are revoked and cleared; for full account deletion requests (subject to having no open active jobs or in-progress/disputed contracts), the account is placed into Glancers' deletion lifecycle (which includes a 30-day restoration grace period before final soft-deletion and identifier tombstoning, revocation of all active session tokens, and deactivation of profile access). You will be notified through your support ticket or registered email when processing is complete.
5. What Data May Be Retained Under Applicable Law
In accordance with Sections 7 and 8 of the Glancers Privacy Policy, Sections 5 and 9 of the Data Processing & Protection Policy, and applicable law (including Egyptian Law No. 151 of 2020 on the Protection of Personal Data and statutory financial, tax, and anti-money-laundering regulations), certain records cannot be permanently erased upon request:
- Commercial orders, freelance service contracts, and deliverable records linked to completed or disputed transactions.
- Financial ledger entries, payment intents, invoices, tax withholdings, payouts, and accounting adjustments required for statutory audit and tax compliance.
- Dispute files, arbitration evidence, fraud-prevention signals, and security/connection audit logs required to protect platform integrity and legal claims.
- Immutable legal policy acceptance records (cryptographic consent hashes) required to demonstrate regulatory compliance.
Where statutory retention applies, Glancers permanently restricts operational account access, revokes authentication and OAuth tokens, and tombstones personal account identifiers so the account is no longer active or publicly visible, while preserving the legally required records strictly for compliance, audit, and dispute resolution purposes.
6. Other Platforms & Meta Integration Notice
Meta (Facebook, Instagram, Meta Ads), TikTok, LinkedIn, X, YouTube, and Composio operate under their own respective terms and privacy policies. Requesting data deletion from Glancers applies to data controlled by Glancers; it does not delete your social media accounts, ad campaigns, or platform history stored on Meta or other third-party platforms.
Note for Meta App Reviewers & Users: This page serves as Glancers' public Data Deletion Instructions URL (configured under Meta App Settings > Basic > User Data Deletion). It provides human-readable instructions and verified request channels and does not represent an automated signed_request webhook callback.
7. Official Contact Channels & Related Policies
For any questions regarding user data deletion, privacy rights, or connected account permissions, please use the official resources below:
