Data Deletion

Effective April 23, 2026 · Last updated April 23, 2026

Talfan complies with data deletion requests under GDPR Article 17, UK GDPR, and similar privacy laws worldwide. This page tells you exactly how to ask for personal data to be deleted, how long it takes, and what we delete.

Who can request deletion

• Tenant admins — request deletion of your own admin account, your tenant workspace, or any data Talfan stores on your behalf.
• Tenant end-customers — if you've messaged a business that uses Talfan and want your data removed, please contact that business first; they control your data and can action the request inside Talfan. If they cannot action it, email us and we will help.
• Meta-initiated deletion — if Meta sends a Facebook Login or WhatsApp Business deauthorization callback for your account, we delete the corresponding tokens and tenant-bound data automatically.

How to request deletion

1. By email — send a request to privacy@talfan.ai from the email address tied to your account, with the subject line "Data deletion request" and the tenant slug or workspace name in the body.
2. From the product — Tenant admins can self-serve from Settings → Workspace → "Delete workspace". This action is permanent.
3. Automated — Meta's deauthorization callback at https://api.talfan.ai/webhooks/meta/deauthorize/ handles Facebook Login revocation and triggers deletion of tokens we hold for that user.

What we delete

• Tenant accounts and admin user records.
• WhatsApp Business access tokens, WABA IDs, and phone-number IDs persisted on the tenant.
• Conversations, tickets, customer profile records, AI drafts, and analytics events tied to the tenant.
• Backups roll off within 30 days.

What we keep, and for how long

• Anonymized usage metrics (no personal data) for product analytics.
• Records required by law (tax, fraud, dispute resolution) for the period the law requires.
• Logs for security investigations: 90 days, then purged.

Timelines

• We acknowledge the request within 2 business days.
• Verified requests are completed within 30 days.
• Backups containing the deleted data roll off within an additional 30 days.

Confirmation reference

When deletion completes you will receive a confirmation email with a reference ID. Keep that email — it is your record that the request was honoured.