Data Deletion Request

1. Who Can Submit a Request

Any of the following may submit a data deletion request:

• Registered users — users who have created an Assistaffer account.
• Organization owners or managers — acting on behalf of their organization's data.
• Customers — individuals whose phone number or other personal data was collected by an organization through the platform (e.g., via WhatsApp booking).

We will verify your identity before processing any deletion request to prevent unauthorized removal of data.

2. What Data We Hold

Depending on your relationship with the platform, we may hold the following personal data:

Registered Users

• Email address and full name (if provided)
• Hashed password (not recoverable)
• Preferred interface language
• Organization memberships and roles
• Last selected organization

Organization Data

• Organization name, slug, and time zone
• WhatsApp Business Phone Number ID and Meta access token
• AI model configuration (LLM endpoint URL, model identifier, API key, system prompt)
• Contact phone number for message forwarding

Customer Data (collected by organizations)

• Customer name (if provided)
• Phone number in international E.164 format
• Email address (if provided)
• Notes associated with the customer profile
• Appointment records linked to the customer
• Chat session messages exchanged with the AI booking agent
• Appointment reminder records

3. What Deletion Covers

Upon a verified and approved deletion request:

• Your account and all associated profile information will be permanently removed from our active systems.
• Your organization memberships will be revoked and, if you are the sole owner, the organization and all its data (resources, schedules, customers, appointments, and chat sessions) will be deleted.
• Customer records, appointment history, and chat session messages linked to your identity will be removed.
• Encrypted backups may retain a copy for a limited additional period before being permanently purged, in accordance with our Privacy Policy.

If you are a customer who interacted with a business through WhatsApp and wishes to have your data removed from a specific organization, we will coordinate with that organization as the data controller to process your request.

4. How to Submit a Deletion Request

To request deletion of your personal data, send an email to our privacy team. Please follow the steps below:

1. Send an email to info@assistaffer.com with the subject line: "Data Deletion Request".
2. Include your full name as registered on the platform (if applicable).
3. Include the email address associated with your Assistaffer account, or the phone number used for WhatsApp interactions (for customers).
4. Describe the data you want deleted — your full account, a specific organization's data, your customer record, or specific chat history.
5. Optionally, include any supporting details that help us identify your records (e.g., organization name, approximate date of last interaction).

5. Response Time

We will acknowledge your request within 5 business days of receipt. The full deletion process will be completed within 30 days of verifying your identity and confirming the scope of the request. If additional time is required due to the complexity of the request, we will notify you and provide an updated timeline.

6. Limitations

In some cases, we may be unable to delete certain data immediately, including:

• Data we are required to retain by law or regulation (e.g., financial records or records subject to a legal hold).
• Data that is necessary to resolve an outstanding dispute or enforce an existing agreement.
• Anonymised or aggregated data that cannot be linked back to you.

Where a limitation applies, we will inform you of the reason and the expected retention period.

7. Further Rights

In addition to deletion, you may also have the right to access, correct, or export your personal data. For more information on your rights and how we handle personal data, please read our Privacy Policy.

If you are located in the European Economic Area (EEA), you also have the right to lodge a complaint with your local data protection authority if you believe your rights have not been respected.