Deleting your data

How to ask us to delete your data

There are 3 routes you can take, and they all end in the same place. Facebook also tells us directly, without you doing anything more: that is 2 sections down.

1. From Facebook. Open your Facebook settings, find Review Integration in the list of apps and business integrations you have connected, and remove it. Facebook tells us at once, and we delete the access tokens we hold for you immediately. If you also ask Facebook to have your data deleted, it sends us a deletion request, which we handle as set out below. The exact clicks are in the next section.
2. From inside Review Integration. Disconnect a review source to delete what we collected through it, delete a contact to erase it, or close the account from its settings to delete everything.
3. By email. Write to privacy@reviewintegration.com and tell us what you want deleted. Use this route if you do not have a Review Integration account. Put “Review Integration data deletion request” in the subject line, and tell us the email address you used, the Page or business involved, the name of the application you connected through, and whether you mean 1 connection or all of them. Send no passwords, no tokens and no identity documents. If we need to verify you beyond what you have sent, we ask for a secure way to do it.

Removing us on Facebook

Facebook keeps its own list of the apps you have authorized, and removing us there is enough on its own. Menu wording moves around; the item you are looking for is the list of connected apps.

• Facebook. Settings & privacy, then Settings, then Apps and websites (Business Integrations on a Page). Find Review Integration and choose Remove.
• Google or Microsoft sign-in. If you signed in to Review Integration with Google or Microsoft, remove it from the list of connected apps in that account’s security settings. We hold no access token from either, so this only stops future sign-ins with that account. To delete your Review Integration account itself, close it from its settings or write to privacy@reviewintegration.com.

What happens automatically when Meta tells us

Facebook calls us directly, and both calls are handled without anyone at Review Integration touching them.

• The deauthorize callback fires the moment you remove the app. We delete every access token we hold for you, and the connection stops working immediately. This is a revocation, not an erasure: it stops new data arriving, and the reviews already collected stay with the business until it deletes them or its review window ends.
• The data deletion request callback fires when you ask Facebook to have your data deleted. Facebook sends it to https://api.reviewintegration.com/meta/data-deletion. We record the request, hand Facebook back a confirmation code and a status URL within its timeout, and queue the erasure. The queue is drained hourly.

Each call is signed by the platform and the signature is verified before anything is recorded, so a request nobody made cannot delete your data either.

The erasure itself covers the tokens, the connected Pages and everything collected through them, the identity we cached about you, and the raw delivery records that hold a copy of the same content. Where you are a reviewer rather than a customer, it covers the identity on your reviews, as the next sections explain.

What we delete

If you connected a Facebook Page to Review Integration, deletion covers:

• The access tokens we hold for every Page you connected, and the grant itself, which we also revoke at Facebook.
• The review source records, and with them every review and reply we collected through them.
• The Page details we cached from Facebook, such as the name and the picture.

Closing your Review Integration account is a separate step and covers your name, your email address, your team and your billing history. Removing our app on Facebook stops the data collection but does not close a paid account, so we do not treat it as a request to.

If you reviewed a business that uses us

When a business connects its Facebook Page to Review Integration, we hold the recommendations left on it, including your name, your Facebook identifier, your profile picture and what you wrote. In that relationship the business is the data controller and we act on its instructions.

If you ask Facebook to have your data deleted, we erase your name, your identifier, your profile picture and the raw data on every review we hold under that identifier, and show “Deleted user” in their place. The text of the review stays with the business, which controls it, until the business deletes it or its review window ends. To have the text removed too, write to privacy@reviewintegration.com. We pass the request to the business, and where we are permitted to act directly we delete it ourselves. Deleting a review from our records does not remove it from Facebook, which holds its own copy.

One honest caveat about identifiers. Facebook gives an app a different identifier for a reviewer than the one it sends us in a deletion request, and the two do not always match. Where nothing matches we say so on the status page rather than report a deletion we did not perform.

If a business asked you for a review through Review Integration, the unsubscribe link in its email stops its requests at once, without a login. For anything you sent it as private feedback, or for your contact details, write to the business or to privacy@reviewintegration.com.

Checking a request

A deletion request that reaches us through Facebook gets a confirmation code and a status URL, and Facebook shows you both. The status URL is https://api.reviewintegration.com/meta/data-deletion/status/ followed by your code. Keep the code. Opening that URL tells you whether the request is received, complete, or could not be completed, and it gives the reason when it could not, because a refusal without a reason is not an answer.

A request made by email gets the same treatment without a code: we confirm it in writing, and we tell you when it is done.

If the code does not resolve, or you never received one, email privacy@reviewintegration.com and we answer within 30 days.

How long it takes

Access is revoked immediately. Data is deleted within 30 days, and usually within the hour, because the deletion queue is drained hourly. Encrypted backups roll over within 30 days, so a deletion reaches them within that window, and a backup is never restored to undo one.

We keep records we are legally required to keep, such as invoices and tax records, for as long as the law requires. Everything else goes. The full retention picture is in our privacy policy, and the processor side is governed by our data processing addendum.

Removing Review Integration does not delete anything on Facebook. Its copies are its own, and the application you connected through keeps whatever its own notice says it keeps.