Data Deletion — Facebook, Instagram and WhatsApp

How to have OKTO Software delete the information it received from Meta when a brokerage or agent connected a Facebook Page, an Instagram account or a WhatsApp Business number to OKTO.

1. What OKTO receives from Meta

Only when a brokerage or agent chooses to connect an account, and only what that connection needs:

• Facebook Pages and Instagram accounts: the account's name and ID, the access token Meta issues so OKTO can publish what you approve, the posts OKTO published for you and their basic results — reach, likes, comments.
• WhatsApp Business: the business number and account ID, the access token, and the messages exchanged with the brokerage's own contacts, so they appear in that brokerage's CRM.

Access tokens are stored encrypted, under that one brokerage's account only. OKTO does not sell this information, does not use it for advertising, and does not share it with other brokerages.

2. How to ask for deletion

Any one of these works:

1. Disconnect inside OKTO. In Marketing › Settings › Connections, choose Disconnect next to the Facebook, Instagram or WhatsApp account. OKTO deletes that account's access token at once, and stops all publishing and syncing for it.
2. Remove OKTO from Facebook. In Facebook, go to Settings & privacy › Settings › Business integrations, find OKTO Software and choose Remove. Meta tells OKTO, and OKTO deletes the access token and the information listed in section 1 that came from that account.
3. Email us. Write to [email protected] with the subject Data deletion request, the name of the Page, Instagram account or WhatsApp number, and the brokerage it was connected to. We may ask you to confirm you control that account before we act.

3. What happens, and when

• Access tokens are deleted immediately when you disconnect, and within 30 days of a request made by Facebook or by email.
• The other information received from Meta for that account — published-post records, results, WhatsApp message copies held for the connection — is deleted within 30 days, and from backups as they expire.
• We confirm by email when it's done.

4. What deletion does not remove

• Posts already on Facebook or Instagram stay there — they belong to the account that published them. You can delete them in Facebook or Instagram yourself.
• A brokerage's own client records. If a WhatsApp conversation with a client was saved to a transaction file or a CRM contact, it is part of that brokerage's records, which OKTO holds for the brokerage as its service provider. Requests about those go to the brokerage, and we pass them on. Arizona requires a broker to keep transaction records for at least five years (A.R.S. § 32-2151.01), so some of it may be kept for that reason.

5. Questions

OKTO Software LLC · 3390 N Campbell Ave, Suite 100, Tucson, AZ 85719 · [email protected]. See also our Privacy Policy and Terms of Service.