Skip to content
Clonvo
Product
Solutions
Developers
Resources
Pricing
Sign inBook a 15-min demo

Legal

Data Deletion

Right to erasure under GDPR Art. 17 and Meta Platform Terms.

You have the right to request deletion of your personal data held by Clonvo. This page describes (a) how individuals (including end-users who interacted with a business using Clonvo) can request deletion, and (b) the programmatic callback URL that Meta uses for its "Data Deletion Request" flow.

1. Who can request deletion

  • Business customers (account holders). Owners can delete their organization from the dashboard at Settings → Danger zone → Delete organization, or by emailing us as below.
  • End-users. If you sent a message to a business that uses Clonvo and want your conversation history deleted, you can either reply STOP on the WhatsApp channel to be removed from broadcast lists, or email us with your phone number / channel handle so we can locate the records.
  • Meta App Review crawler. Meta's Data Deletion Request flow uses the callback URL below.

2. How to request deletion (humans)

  1. Email privacy@clonvo.chat with the subject line "Data deletion request".
  2. Include enough information for us to locate your records: the email registered on your account or, for end-users, the WhatsApp / Instagram / Messenger handle and the business you contacted.
  3. We verify the request within 5 business days (we may ask follow-up questions to confirm identity).
  4. We complete deletion within 30 days of verification and confirm by email. Encrypted backups are overwritten in the next backup rotation cycle (≤ 30 days).

3. What gets deleted

  • Account profile, organization membership, billing identifiers.
  • Conversation history (messages, media, AI replies) associated with your phone number / channel handle.
  • RAG knowledge documents and chunked embeddings.
  • Encrypted channel-provider credentials.

4. What we may retain (and why)

  • Anonymized aggregate usage metrics (e.g. "# of conversations / day") that cannot be linked back to you.
  • Records required by tax / accounting law (invoice metadata) for the period mandated by Pakistani law (typically 5 years).
  • Audit log entries necessary for security investigations, retained for up to 12 months.

5. Meta Data-Deletion callback URL

Meta App Review requires every app that uses Meta Platform Data to publish a callback endpoint. Ours is:

https://api.clonvo.chat/data-deletion/callback

It accepts a signed Meta deletion request, parses the user identifier, enqueues a deletion job, and responds with the JSON payload Meta expects (url + confirmation_code) so the end-user can track the request. The same handler is also reachable at https://api.clonvo.chat/api/v1/data-deletion-callback for backward compatibility with Meta apps configured before May 2026. Implementation: see src/app/api/v1/data-deletion-callback/route.ts.

6. Right to lodge a complaint

If you believe we have not handled your request correctly, you may complain to your local data-protection authority. EU residents may contact their national supervisory authority; UK residents may contact the ICO.

7. Contact

Privacy / deletion: privacy@clonvo.chat. Data Protection Officer: dpo@clonvo.chat.