Data erasure and retention
Erasure on request
A customer who writes "delete my data" (or the Hebrew equivalent) gets a real erasure: message contents, media and Meta identifiers are deleted, the contact is marked "erased" and opted out forever. One row remains in the consent log β the evidence that we honoured the request. You can also trigger the erasure from the conversation menu ("Erase data at the customer's request").
Automatic erasure
- Conversation contents are purged after the business's retention period (180 days by default; changeable in Settings). Leads, appointments and summaries remain.
- Technical events (the system log) β 90 days.
- The consent and opt-out log β never deleted. It is your legal evidence.
The business's own data
In Settings you can export all data (contacts, leads, appointments, calls and users) as a JSON file, and request account deletion β the business is paused immediately and deleted after a waiting period; you can cancel in the meantime.
What is never stored in the first place: credit card and ID numbers are masked before saving, and amounts on payment receipts are hidden from the AI. Security & privacy β