Data Deletion
This page explains how to have your data deleted from A3malak (the “Service”), operated by Appray ai LTD. It applies to businesses that use the Service (“merchants”), to people who message those businesses on WhatsApp (“customers”), and to people who connected a WhatsApp Business number through Facebook (Meta Embedded Signup). See also our Privacy Policy.
1. Merchants
Account Owners and Admins can do the following in the web app (https://app.a3malak.com):
- Stop our access to WhatsApp: Settings → WhatsApp & channels → Disconnect next to the number. We remove our app from your WhatsApp Business Account and delete the access token immediately. You keep your number and WhatsApp account.
- Export your data first: Settings → Security & data → Privacy & data → Export all data (customers, conversations, orders and products as CSV and JSON).
- Shorten retention: on the same page, under Data retention, choose how long conversations and media are kept and when inactive customers are deleted.
- Delete your whole account: Billing → Cancel subscription. When the paid period ends we stop using your WhatsApp number, and your business data (customers, conversations, media, products, orders and staff accounts) is deleted 30 days later, except records the law requires us to keep (see section 4). To delete sooner, the account Owner can email [email protected] from the Owner’s email address; we confirm ownership and complete the deletion within 30 days.
2. Customers of a business that uses the Service
The business you messaged decides how your data is used (it is the controller; we process the data on its behalf). To have your data deleted:
- Ask the business, for example by sending them a WhatsApp message saying you want your data deleted. The business logs the request in the app (Settings → Security & data → Customer data requests, type Deletion) and must complete it within 30 days. Completing it permanently deletes your profile, conversations and media; orders and invoices are kept with your personal details removed, for tax records.
- Or email us at [email protected] with the business’s name and the phone number you used. We pass the request to the business and help it complete the request within 30 days.
- To stop promotional messages at any time, send STOP (or «إيقاف») to the business on WhatsApp.
3. People who connected WhatsApp through Facebook
When a merchant connects a WhatsApp Business number, they sign in with Facebook (Meta Embedded Signup) and grant our app access to their WhatsApp Business Account. We store the access token for that number and the app-scoped Facebook user id of the person who granted it. We do not store your Facebook profile, friends or posts.
- Remove the app in Facebook: in Facebook, open Settings & privacy → Settings → Apps and websites (or Business integrations), remove A3malak and choose to delete data (or ask Meta to send us a data deletion request). Meta notifies us automatically. We then disconnect every WhatsApp number you connected, unsubscribe our app from the WhatsApp Business Account, and delete the stored access tokens and two-step verification PIN. You receive a confirmation code and a link to a page showing the status of your request.
- Or email us at [email protected].
A store’s conversations, customers and orders belong to the store and are not deleted by a Facebook request; they follow section 1.
4. What is deleted, and when
| Data | When it is deleted |
|---|---|
| WhatsApp access tokens and two-step verification PIN | Immediately on disconnect, or when Meta’s deletion request is processed (normally within minutes) |
| A customer’s profile, conversations and media | When the business completes the deletion request (within 30 days of the request) |
| Conversations and media under the business’s retention setting | Automatically when they pass the retention period (default 3 years) |
| A closed business account and its data | 30 days after closure |
| AI prompts and outputs | After 30 days |
| Backups | Overwritten within 35 days of the deletion |
| Orders and invoices | Kept for the statutory tax period with personal details removed, then deleted |
| Audit logs (who did what, without message content) | Kept for at least 2 years for security and legal obligations |
Messages already delivered to a WhatsApp user remain on that person’s device, and Meta processes WhatsApp data under its own terms; deleting data from our Service does not delete it from WhatsApp or Meta.
5. Contact
[email protected] · Appray ai LTD, Gasabo, Kigali, Rwanda. We answer deletion requests within 30 days.