User Data Deletion Instructions

1. Procedure 1: Instant Self-Service Account & Data Purge (Recommended)

If you maintain an active Backforms account, you can execute a permanent, immediate purge of all your forms, endpoints, historical submissions, access tokens, and account records directly via the developer dashboard:

1. Sign in to your account at app.backforms.com/sign-in using your email or Google OAuth credentials.
2. Navigate to your Account Settings panel within the console sidebar.
3. Scroll to the “Danger Zone” section and click “Delete Account & Purge All Records”.
4. Confirm the security prompt. The system will immediately terminate all active form endpoints, scrub submission logs from our Neon PostgreSQL cluster, and disassociate uploaded attachments from storage.

2. Procedure 2: Revocation and Deletion via Meta / Facebook Settings

If you authorized the Backforms Alerts Facebook application or connected your WhatsApp Business Cloud API gateway, and you wish to revoke permissions and request data deletion through Meta:

1. Log in to your Facebook profile and navigate to Settings & Privacy > Settings.
2. In the left-hand navigation menu, select Apps and Websites under the Permissions section.
3. Locate Backforms Alerts (or Backforms) in your authorized applications list.
4. Click the Remove button next to the application name.
5. Confirm the removal request. If you select the option to send a deletion request to the developer, Meta will dispatch an automated signed server-to-server callback to our callback endpoint.
6. Upon receiving Meta's automated callback, Backforms generates a unique confirmation reference code and queues your associated records for complete erasure.

3. Procedure 3: Formal Written Deletion Request via Email

You may submit a formal Data Subject Access Request for erasure by sending a written notice to our privacy desk:

• Recipient Email: info@backforms.com
• Subject Line: Formal User Data Deletion Request - [Your Account Email]
• Required Body Details: Include your registered account email address, specific form endpoint IDs or access keys (if applicable), and any WhatsApp notification phone numbers you wish disassociated.
• Statutory Turnaround: Written requests are acknowledged within 24 hours and completed within forty-eight (48) business hours. A confirmation certificate will be returned via email.

4. Scope of Irreversible Data Erasure

When an erasure request is executed, the following information is permanently and irreversibly purged from our servers:

• Form Endpoints & Routing Keys: All form routes, endpoint tokens, and domain whitelists are deactivated and removed.
• Lead Records & Payloads: All submission rows, field values, timestamps, and anti-spam metadata are scrubbed from our database.
• Uploaded File Attachments: Attachments associated with form submissions are permanently removed from encrypted cloud storage.
• Integration Secrets: HMAC keys, Telegram bot tokens, Discord/Slack webhooks, and WhatsApp phone registrations are erased.