User data deletion

• KoreXport does NOT offer “Log in with Facebook” to its visitors. If you browse korexport.co, buy a vehicle or write to us, no Meta data about you is collected: your Facebook or Instagram account is unknown to us.
• The Meta connection concerns only KoreXport’s own business accounts — our Facebook page and our Instagram account — which our administrators authorise in order to publish our own vehicle listings.
• You may nonetheless ask at any time for the deletion of any data we hold about you, whether it came from Meta or elsewhere. The procedure is described below.

When a KoreXport administrator authorises our application from Meta, we store only:

• the access token issued by Meta, and its refresh token where one exists;
• that token’s expiry date;
• the identifier of the Facebook page and of the Instagram business account to publish to;
• the public display name of that page or account, so it can be shown in our admin area.

We do not collect your follower list, your private messages, your contacts, or any personal data about the people who see our posts. Your Meta account password is never sent to us: authorisation goes exclusively through Meta’s official system.

We acknowledge your request within 5 working days and complete the deletion within 30 days at the latest. We confirm in writing what has been deleted. Deletion is free of charge.

One reservation, and only one: accounting and customs documents already issued — quotes, invoices, export papers — are kept for as long as the law requires. They contain no data obtained from Meta.

• The access token is removed from our database as soon as the account is disconnected, or as soon as we receive your request.
• A deleted token can no longer be used: any further publishing to that account becomes impossible until a new authorisation is granted.
• Tokens are stored encrypted, are never sent to the browser, and do not appear in our technical logs.

You do not need us in order to withdraw the authorisation. You can do it directly at Meta, and revocation takes effect immediately:

• Facebook: Settings & privacy → Settings → Apps and websites → select KoreXport → Remove.
• Instagram: Settings → Security → Apps and websites → Active → select KoreXport → Remove.

An authorisation revoked at Meta makes our token unusable at once. Write to us afterwards if you also want us to erase whatever remains on our side.