Where your data lives
Dino RD&C LLC (“Dino RD&C”) makes a software platform called BOS that businesses install on a Dino appliance located at the business’s own premises.
When a business connects its Instagram, Facebook, or WhatsApp Business account to BOS, messages and metadata from those platforms are delivered to the business’s appliance through a Cloudflare Worker that Dino RD&C operates as a pure pass-through relay. The Cloudflare Worker does not store your data. Dino RD&C does not store your data. The data is stored on the appliance owned and operated by the business that messaged you.
This means there are typically two places to send a deletion request:
- The business itself, which holds the data on its appliance.
- Dino RD&C, to confirm the deletion was performed and to remove any operational logs or metadata that may incidentally reference you.
You can submit either or both. We recommend both.
How to request deletion
Option A — Email (page-based deletion request)
Email [email protected] with the subject line:
Meta Data Deletion Request
Include in the body:
- The platform: Instagram, Facebook, or WhatsApp.
- Your username, page name, or phone number used on the platform.
- The name of the Dino RD&C-powered business you communicated with (if known).
- Your preferred contact email for confirmation.
We will:
- Identify the business or businesses whose appliances may hold your data.
- Notify each business of your deletion request.
- Coordinate with the business to delete your data on their appliance.
- Delete any incidental references in our own logs.
- Email you a confirmation when complete, typically within thirty (30) days.
Option B — Programmatic callback (for Meta-initiated deletion)
If you trigger data deletion through Meta’s “Apps and Websites” settings, Meta will send a deletion request to our registered callback URL:
https://dinoaihost.com/api/meta/data-deletionThis endpoint:
- Validates the signed request from Meta.
- Returns a confirmation URL and tracking code per Meta’s specification.
- Forwards the deletion request to the relevant business appliance(s).
- Logs completion within thirty (30) days.
You can confirm the deletion using the tracking code at the URL provided in Meta’s response.
What we delete
When you request deletion, the following will be removed:
- Direct messages between you and the business on Instagram, Facebook, or WhatsApp.
- Profile information (username, profile picture, and similar) cached locally on the business’s appliance.
- Page interaction metadata (comments, reactions) cached locally on the business’s appliance.
- Any audit-log entries that reference you specifically, except where retention is required by law.
What may not be deleted
The following may not be deleted, in line with Meta Platform Terms and applicable law:
- Records the business is legally required to keep (for example, tax records and invoices that mention you as a customer).
- Information that has been securely de-identified and aggregated such that it can no longer be linked to you.
- Operational logs already overwritten by routine retention rotation.
If any of these apply, we (or the business) will tell you in the confirmation message.
Timeframe
We confirm completion within thirty (30) calendar days of receiving a verifiable request. Encrypted backups containing your data are purged within ninety (90) days.
Questions
If you have questions before submitting a request, email [email protected] with the subject line “Meta Deletion — Question.”
Contact
QUESTIONS · [email protected]