Data deletion

Anyone whose personal data we hold can request its deletion. This includes Buddy account holders and members, website visitors, and people who were contacted by a business through Buddy. If you were messaged by a business that uses Buddy, that business is the controller of your data. You can ask us directly and we will act on it, and we will also support that business in responding to your request.

There are three ways to request deletion:

• Remove Buddy from Facebook. If you connected through Facebook, go to your Facebook settings, open Settings and privacy, then Settings, then Apps and Websites, and remove Buddy. Facebook automatically sends us a deletion request and returns a confirmation code you can track on this page.
• Delete from inside the app. Account owners can delete a workspace and its data from Settings inside Buddy. This removes the workspace and the personal data associated with it.
• Email us. Send a request from the email address on your account to privacy@usebuddy.app, or use the contact page. We may need to verify your identity before completing the request.

When you remove Buddy from your Facebook settings, Facebook sends Buddy a signed data deletion request. Buddy verifies the signature, records the request, begins deletion, and returns a status URL and a unique confirmation code. The status URL brings you to this page with your code, where you can check progress. Buddy also honors Facebook deauthorization notifications by ending the connection associated with your account.

We delete the personal data associated with your account and workspace, which may include:

• Profile and account details, such as name, email, and phone number.
• Workspace and membership records tied to you.
• Subscribers, contacts, and consent records you manage, where you are the controller.
• Messages, campaigns, templates, automations, replies, and analytics tied to you.
• Connection data, including WhatsApp Business Account and phone number identifiers and stored access tokens.

Some records may be retained after a deletion request where the law allows or requires it. This can include limited billing and transaction records for tax and accounting, records needed to resolve disputes or enforce our agreements, security and audit logs, and data held in routine encrypted backups. Retained data is kept only for as long as necessary and is then deleted. Backups are overwritten on a rolling cycle. We may also keep data that has been aggregated or anonymized so that it no longer identifies you.

We begin processing deletion requests promptly and aim to complete them within 30 days, unless a longer period is permitted or required by law, or the request is unusually complex. Data held in encrypted backups is removed within the normal backup rotation cycle after the live data is deleted. You can check the status of a Facebook-initiated request at any time using the confirmation code returned to you.

For any question about deletion or your privacy rights, email privacy@usebuddy.app. For more detail on how we handle data, see our Privacy Policy.