Data Deletion Request

1. Who this page is for

This page explains how to have the data ChattyFlow holds about you deleted. It applies to two groups of people:

• Account holders — businesses, influencers and agencies who created a ChattyFlow account and connected an Instagram or TikTok account.
• End users — followers, customers and website visitors who interacted with an automation, a comment reply, a direct message or a chat assistant operated by a ChattyFlow account holder.

2. Request deletion from Instagram or TikTok

You can revoke ChattyFlow's access directly on the platform, which stops all further processing:

• Instagram: Settings and activity → Apps and websites → Active → remove ChattyFlow.
• TikTok: Settings and privacy → Security and login → Manage app permissions → remove ChattyFlow.

Meta and TikTok notify us automatically when you do this. On receiving that notification we delete the Platform Data we derived from your account, and we return a confirmation code to the platform that issued the request.

3. Request deletion directly from us

Send an email to akhairallah@chattyflow.com with the subject line Data deletion request. Include:

1. The Instagram or TikTok username (or the email address) the data relates to.
2. Whether you are an account holder or an end user who interacted with a business using ChattyFlow.

We confirm receipt within 5 business days and complete the deletion within 30 days. If we need to verify that the request comes from you, we will ask for the minimum information necessary to do so and nothing more.

Account holders can also delete everything themselves: open the ChattyFlow dashboard, go to Settings, and use Delete my account. This removes the account, its connected platforms, its automations and all associated data.

4. What we delete

• Access and refresh tokens for the connected Instagram or TikTok account.
• Platform profile data: usernames, account IDs, profile pictures, follower and media counts.
• Comments, direct messages and message threads we processed on your behalf, including the automation history attached to them.
• Leads, contact details, survey answers, bookings and orders collected through ChattyFlow.
• Chat assistant conversations, any name, email or phone number a visitor gave us, and any voice recording sent to the assistant.
• Website reading records (which sections were read, for how long, scroll depth and clicks) linked to the request.

Deletion is immediate in our live database. Encrypted backups are isolated from further processing at once and overwritten within 30 days on their normal rotation.

5. What we may keep, and why

We keep only what the law requires us to keep: invoices and payment records for the retention period set by Tunisian tax law, and a minimal record of the deletion request itself (date, platform, confirmation code) so we can prove the request was honoured. Neither contains message content.

We also keep records proving that you agreed to a booking notice or our policies (date, notice version and text, language and channel). These contain no message content, cannot be altered, and are permanently deleted twenty-four (24) months after the account holder you dealt with deletes their account. Booking contact details themselves are erased seven (7) days after the appointment.

6. Questions

Privacy and deletion requests: akhairallah@chattyflow.com. Anything else: akhairallah@chattyflow.com.