[mziel]

You also need to make sure you implement true deletion instead of a DB flag (and still use that stuff on the backend).

[SahAssar]

And that's not even getting into logs or backups, which will probably be a problem to delete from for smaller companies (since I'm assuming that facebook couldn't keep logs or backups for 30 days since that would be massive)