Deleting your data

BuybackOS is software that other businesses use to run their buying operations. That means the answer depends on which side of it you are on.

If you sold something to a business that runs on BuybackOS — you mailed in supplies, or messaged their Facebook Page — that business decides what happens to your information. We hold it for them. Ask them first. If you cannot reach them, ask us and we will pass it on and follow up until it is done.

If you run a buyback business and have an account with us, BuybackOS holds your account information directly. Ask us.

When you message one of our customers' Facebook or Messenger Pages, Facebook hands the Page three things, and those land in BuybackOS:

• the name on your Facebook profile
• the ID Facebook uses to identify you to that Page — a long number, different for every Page, which is why it cannot be used to find you anywhere else
• the messages you sent, and the replies sent back

We do not receive your email address, your phone number, your friends, your posts, or anything else on your profile. If we have your email or phone, it is because you typed it in somewhere.

Any one of these works. You do not need an account, and you do not need to explain why.

• Message the Page. Send the Page you were talking to the words delete my data. It gets flagged for a person the same day.
• Use the contact form. Fill in the contact form and say you want your data deleted. Tell us the name you used and the Page you messaged, so we can find the right record.
• Remove the app at Facebook. In Facebook, open Settings & Privacy → Settings → Apps and Websites, find the app, and remove it. Facebook tells us, and we treat that as a deletion request.

We confirm we got the request, usually within a day or two. The deletion itself is done within 30 days, and we tell you when it is.

Deleted means deleted — the messages, the name, the Facebook ID, and anything attached to them come out of the live system and out of our backups on the next backup cycle.

If the business already bought something from you and paid you for it, that purchase is a financial record and the law makes them keep it for several years. The same goes for the audit trail behind it. Those records stay until the retention period runs out, and then they go.

Everything that is not one of those — your messages, your contact details, your name against the conversation — goes straight away. And if a record has to stay, we tell you which one and why rather than quietly keeping it.

Deletion is one of several things you can ask for. You can also ask for a copy of what is held about you, ask for it to be corrected, and ask us to stop sending you marketing. The privacy policy covers all of it, including what we collect in the first place and who else touches it.