Data Deletion Instructions

SLA: 30-Day Permanent Purge · Policy: GDPR Art. 17 / CCPA · Meta Callback: Enabled

1. Your Right to Data Deletion

In compliance with Meta Platform Policies, the General Data Protection Regulation (GDPR Art. 17 — Right to Erasure), and the California Consumer Privacy Act (CCPA), Poocho AI provides all users, customers, and WhatsApp message recipients with mechanisms to permanently delete their personal data.

2. What Data is Purged

Upon verification of a deletion request, our automated purge routines delete the following records:

Account & Workspace Data

• Authentication credentials and Argon2 password hashes.
• Organization names, subdomain bindings, and staff records.
• Payment tokens and billing contact records.

WhatsApp Conversation Data

• Message logs, customer chat transcripts, and timestamps.
• Voice notes, audio recordings, and media attachments.
• AI transcriptions and LLM response caches.

3. Deletion Timeline & Retention SLA

• Active Production Stores: Data is permanently erased within 30 calendar days of receiving a verified request.
• Encrypted Backup Archives: Encrypted backup snapshots are cycled out completely within 90 days.
• Financial Records: Invoices and tax audit logs may be retained as mandated by applicable statutory accounting regulations.

4. Instructions for WhatsApp End-Users

If you interacted with a business running on Poocho AI via WhatsApp and wish to have your contact details and message logs deleted:

1. Send an opt-out message: Reply with STOP, UNSUBSCRIBE, or DELETE MY DATA directly in the WhatsApp chat to immediately halt broadcasts and trigger an automated opt-out.
2. Submit a direct deletion request: Email hello@poochoai.com with your phone number (including country code) and the name of the business you interacted with.

5. Instructions for Workspace Admins

If you are a Poocho AI tenant administrator and wish to delete your entire organization workspace, contact database, and WhatsApp integration:

1. Cancel your active subscription: Navigate to Settings → Subscription in your workspace and cancel recurring billing (see our Cancellation Policy).
2. Submit an organization deletion request: Email hello@poochoai.com from your registered owner email address, specifying your workspace subdomain.

6. Submitting a Request

To submit a data deletion request, email hello@poochoai.com with your registered email address and, where applicable, your WhatsApp phone number and the reason or specific scope of your request. Deletion requests are verified by our Data Protection Officer before being executed across all clusters. An interactive request composer is also available on the workspace portal.

7. Meta Platform Data Deletion Callback

In compliance with Meta Platform Developer Requirements, Poocho AI supports the automated Data Deletion Request Callback URL. When a user removes our app via their Facebook/Meta Account Settings, Meta sends a signed request to our automated deletion callback endpoint, initiating an automated deletion sequence and generating a verifiable status URL.

Callback Protocol: POST /api/webhooks/meta-data-deletion
Payload Verification: HMAC-SHA256 Signed Request Validation