Data Deletion

01 What This Page Covers

This page explains how to remove a connection from RegFin and how to request deletion of the data tied to it. It applies to firms and users who have connected a WhatsApp Business number, a Facebook Page or an Instagram professional account so their business communications are archived for regulatory recordkeeping.

Meta requires this page for apps that use its platforms. For how RegFin handles data across the platform, see our Privacy Policy.

02 What RegFin Stores From a Connection

A compliance officer or advisor connects an account by signing in with Meta and approving RegFin’s access. RegFin then stores connection details and the communications it archives.

WhatsApp Business numbers

• WhatsApp Business Account ID: The identifier for the connected business account
• Phone Number ID and Display Number: The identifier and the visible phone number for the connected line
• Business Access Token: A token Meta issues for the connected account, stored with application-level encryption, that lets us receive the account’s conversations

Facebook Pages and Instagram accounts

• Account ID and Name: The identifier and name of the connected Facebook Page, or the identifier and username of the connected Instagram account
• Access Token: A token Meta issues for the connected Page or account, stored with application-level encryption, that lets us read its posts, comments and messages

We do not store Facebook, Instagram or WhatsApp profile data from the person who signs in to authorize a connection.

Archived communications

After a connection is made, RegFin archives the business communications on it on behalf of your firm as regulatory records: WhatsApp conversations (messages, images, video, documents, and edit and deletion events); a Facebook Page’s posts, comments and Messenger conversations; and an Instagram account’s posts, reels, stories, comments and Direct messages. RegFin does not send messages or post to Meta platforms for your firm.

03 How to Remove a Connection

WhatsApp. Go to Archive Settings, open the WhatsApp section, and choose Disconnect. Only users with a compliance role can do this. RegFin stops archiving new conversations from that number and deletes the stored business access token. When no other connected number remains on the same WhatsApp Business Account, RegFin also unsubscribes that account from Meta so Meta stops delivering its conversations.

Facebook and Instagram. Open the enrolled account in RegFin and choose Disconnect. The account’s owner or a compliance user can do this. RegFin stops archiving the Page or account and deletes the stored access token. You can also remove RegFin from the Page or account in your Facebook or Instagram settings. That ends RegFin’s access at once. When you remove RegFin from an Instagram account, Meta notifies us and we delete the stored access token. For a Facebook Page, disconnect it in RegFin as well, or email us, to have the stored token deleted.

The connection details for records already archived, such as the account ID, phone number or Page name, stay attached to those records. They are part of the compliance trail and cannot be removed while the records are under their retention period. See Section 5.

04 How to Request Deletion of Connection Data

If you cannot use the in-app disconnect, or you want written confirmation that connection data has been removed, email us at [email protected]. Put “Data deletion” in the subject line and include the WhatsApp Business number, Facebook Page or Instagram account involved.

We respond within 30 days. Before we act on a request, we verify your identity and your authority to act for the firm that owns the connection. When the deletion is complete, we send written confirmation of the data that was deleted and the date it was deleted.

05 Archived Communications and Regulatory Retention

RegFin archives business communications so firms can meet their recordkeeping duties under SEC Rule 204-2 and Exchange Act Rule 17a-4. These records are stored in write-once storage for a fixed 6 years from the message date (see our Privacy Policy).

Because of these rules, archived communications cannot be deleted before the retention period ends, even on request. Removing a connection stops new archiving. It does not remove communications that are already archived.

The archived records belong to the customer firm. If a request concerns archived business communications, send it to that firm’s chief compliance officer, who decides what happens to the firm’s records within the limits of these rules.

06 Contact Us

If you have questions about removing a connection or deleting connection data, please contact us.