Back to Axilrate

Legal

Data Deletion Instructions & User Data Handling Policy

Last updated: August 2026

1. Introduction

This Data Deletion Instructions & User Data Handling Policy explains how data deletion requests are managed for users and businesses using our platform.

We provide customer communication, engagement, messaging, campaign management, automation, analytics, and related software services for businesses across multiple communication channels including WhatsApp and other third-party integrations.

This document describes: our role in processing data; how deletion requests are handled; how businesses can request deletion; how end users may exercise their rights; retention and operational limitations; and Meta / WhatsApp-related responsibilities.

2. Our Role as a Service Provider

Our platform primarily operates as a Data Processor or Service Provider on behalf of our business customers ("Business Customers"), who act as the Data Controllers, determining what personal data is collected, why, how it is used, how long it is retained, and when it should be deleted.

We process data solely in accordance with Customer instructions, applicable agreements, platform operational requirements, and applicable laws and regulations. We do not independently determine the purposes for which our Business Customers collect end-user information.

3. End User Data Deletion Requests

If you are an individual who interacted with a business that uses our platform, requests relating to your personal data (deletion, correction, access, consent withdrawal, restriction of processing, communication opt-outs) should generally be directed to that business. Because the Business Customer controls the relationship with the end user, they are responsible for validating and authorizing such requests.

Once we receive valid deletion instructions from the relevant Business Customer, we will process the deletion request in accordance with our contractual obligations, platform policies, operational procedures, and applicable laws.

3A. Requests Involving Minors

If a deletion request, or our own review, indicates that data relating to an individual under the age of 18 ("Minor") has been processed through the Platform in violation of our Acceptable Use Policy, we will treat this as an expedited matter, prioritize the deletion request, and may independently reach out to the relevant Business Customer to confirm removal, without prejudice to the Business Customer's own obligations under our Terms & Conditions and Acceptable Use Policy.

4. How Business Customers Can Request Deletion

Authorized Business Customers may request deletion of data through platform dashboard controls, administrative tools, authorized APIs, customer support requests, account management representatives, or compliance/privacy support channels.

Business Customers may request deletion of individual contacts, contact lists, message records, campaign interaction data, custom attributes, imported datasets, user profiles, conversation history, and communication preferences.

Certain deletion functionality may depend on subscription plans, product configuration, integration limitations, regulatory obligations, or third-party platform restrictions.

5. Data That May Be Stored

Depending on how our platform is used by Business Customers, we may process or store: Contact Information (phone numbers, email addresses, names, external customer identifiers); Communication Data (messages, templates, campaign interactions, delivery statuses, engagement activity); Technical & Device Information (IP addresses, browser details, device identifiers, operating systems, session metadata); Usage & Analytics Information (platform interactions, activity logs, campaign performance metrics, event tracking data); and Customer-Provided Information (additional data fields or custom attributes Business Customers store based on their own requirements and lawful basis for processing).

6. Data Deletion Process

Upon receipt of a valid deletion request from an authorized Business Customer, we may remove active records from operational systems, delete associated communication history, remove contact identifiers, anonymize data where appropriate, remove searchable references, and restrict further processing.

Deletion actions may vary depending on system architecture, backup processes, fraud prevention requirements, legal obligations, security requirements, and third-party integration constraints.

6A. AI-Processed Data

Where personal data has been processed through the Platform's AI/machine-learning functionality (as described in our Terms & Conditions and Privacy Policy) for purposes such as message drafting, personalization, or automated responses, deletion of the underlying contact or record will also remove that data from active AI-processing pipelines. Because Axilrate does not use Customer or End User personal data to train models shared across other customers, no separate model-retraining action is required as a result of a deletion request.

7. Retention Periods

Unless otherwise required by law, agreement, or legitimate operational necessity, deletion requests are generally processed within 30 days.

Certain information may be retained for a limited duration for purposes including security monitoring, fraud prevention, abuse detection, audit logging, legal compliance, financial recordkeeping, dispute resolution, and system integrity and recovery.

Backup systems may retain encrypted or archived copies for a temporary period before automated deletion cycles are completed.

8. WhatsApp and Meta Platform Data

Businesses using WhatsApp, Meta integrations, or related messaging services through our platform remain responsible for complying with WhatsApp Business Messaging Policies, Meta Platform Terms, applicable privacy and data protection laws, consent and opt-in requirements, and applicable customer communication regulations.

Business Customers are responsible for obtaining lawful consent where required, maintaining opt-in records, honoring opt-out requests, managing lawful communication practices, and providing required privacy disclosures to their users.

We provide infrastructure and tools that enable authorized customers to manage retention and deletion operations.

9. Third-Party Services & Integrations

Our platform may integrate with third-party providers and infrastructure partners for services including cloud hosting, messaging delivery, analytics, monitoring, customer support, and security services, as further detailed in our Privacy Policy (Section 7, Subprocessors).

Deletion requests may require coordinated processing across integrated systems and providers. Certain third-party platforms may maintain independent retention periods and policies governed by their own legal and operational requirements.

10. Security Measures

We implement reasonable administrative, technical, and organizational safeguards designed to protect data against unauthorized access, misuse, alteration, disclosure, or destruction, including access controls, encryption, logging and monitoring, authentication systems, role-based permissions, and infrastructure security controls. No system or transmission method can be guaranteed to be completely secure.

11. Limitations & Exceptions

We may decline, delay, or limit deletion requests where required by applicable law; necessary for legal defense; required for fraud prevention or security investigations; necessary for financial or tax compliance; required to enforce contractual rights; or technically infeasible within reasonable limits. Where possible, processing may instead be restricted or anonymized.

12. Policy Updates

We may update this document from time to time to reflect regulatory changes, platform updates, operational changes, compliance requirements, or third-party platform requirements. Updated versions will be published on this page with a revised effective date.

13. Contact Information

For privacy, compliance, or data deletion inquiries, contact:

Terms & ConditionsPrivacy PolicyAcceptable Use PolicyCookie PolicyData Deletion