01Overview
Veltrum.io ("Veltrum", "we") gives commerce teams a way to deploy AI agents across their stack — including connections to Meta (Facebook, Instagram and the Meta Marketing API), Google, Shopify and other platforms. When you connect one of those accounts, we receive data on your behalf to operate the workflows you've configured.
You can ask us to delete that data — yours or your end users' — at any time. This page explains exactly how.
02What data we hold
Depending on what you've connected and which agents you've deployed, Veltrum may hold:
| Category | Examples | Source |
|---|---|---|
| Account & profile | Name, work email, phone, brand name, role | You / your team |
| Authentication tokens | OAuth access & refresh tokens for connected platforms | Meta, Google, Shopify, etc. |
| Meta Marketing data | Ad account IDs, campaign & ad-set metadata, ad spend, impressions, clicks, attribution windows, page IDs, Page tokens | Meta Marketing API / Graph API |
| Commerce data | Orders, customers, products, inventory, returns, fulfilment status | Shopify / commerce platforms |
| Agent activity | Workflow runs, agent decisions, audit logs, performance metrics | Generated by Veltrum |
For full detail of what each integration retrieves, see our Privacy Policy.
03How to request deletion
You can request deletion in any of the following ways. All routes go to the same Data Protection team and the same 30-day SLA applies.
04What happens after a request
- Acknowledgement (within 72 hours). You receive a written confirmation including a request reference ID.
- Verification. If the request comes from outside the registered account, we may ask for additional proof of identity or authority before we proceed.
- Token revocation (immediate). Any OAuth tokens for the affected platform(s) are revoked at our end and at the upstream platform.
- Production deletion (within 30 days). Personal data and platform-sourced data are removed from our production databases, object storage, search indexes and caches.
- Backup expiry (within 90 days). Encrypted backups roll off on their normal cycle and the data is unrecoverable from that point.
- Confirmation. You receive a final confirmation when production deletion is complete, quoting the same reference ID.
05Disconnecting Meta specifically
Because Meta requires a documented deletion path for any app that uses the Meta APIs, here's the precise procedure:
- Sign in to business.facebook.com.
- Open Business Settings → Integrations → Business Integrations.
- Find Veltrum in the list and choose Remove.
- Meta will notify Veltrum via the Data Deletion Callback we have registered for this app. We will:
- delete all Meta-sourced data (ad insights, page tokens, ad account associations, audience metadata, etc.) within 30 days;
- send a confirmation to the email registered against the Veltrum workspace;
- provide a status URL that Meta can poll if a reviewer requests it.
06What we may retain
A small number of items may persist beyond a deletion request, strictly where the law requires it or where we have a legitimate, narrow operational need:
- Tax & financial records — invoice, billing and tax artefacts retained for the period required by Indian tax law (currently 8 years).
- Security & audit logs — minimal logs (timestamp, IP hash, action) retained for up to 12 months for fraud, abuse and incident investigations.
- Legal holds — records subject to a live legal proceeding, retained until the matter is closed.
None of these contain Meta-sourced personal data — they cover Veltrum's own billing and audit footprint only.
07Contact
For any deletion request, status check, or escalation:
- Email: info@veltrum.io
- Postal: Veltrum Technologies Pvt. Ltd., Hyderabad, Telangana, India
- Related: Privacy Policy · Terms & Conditions