Data Deletion

Depending on how you interacted with AskZoye, we may hold some or all of the following. The full list of categories, sources, and retention windows lives in our Privacy Policy.

Merchant account data

• Name, email, company, and OAuth profile if you signed in with Google or GitHub
• Workspace settings, API keys, and integration tokens for Shopify or WooCommerce
• Billing records (subscription plan, transaction history) handled by Paddle

End-customer chat data

• Chat transcripts between you and the AI assistant or a human agent
• Any details you shared during the chat (name, email, order number, etc.)
• WhatsApp identifiers if you messaged a store using AskZoye via the WhatsApp Business Platform

Operational data

• IP address, device type, and browser metadata used for security and rate-limiting
• Server and error logs needed for debugging, abuse prevention, and audit

Choose whichever path applies to you:

1. You signed up at askzoye.com. Email privacy@askzoye.com from the address on your account. We will verify ownership and start the deletion within 7 business days.
2. You messaged a store using AskZoye through WhatsApp or the website widget. Email privacy@askzoye.com with the WhatsApp number or email you used and, if you remember it, the store name. We will locate and delete your conversation history within 30 days.
3. You revoked AskZoye's access from your Facebook or Meta account. Meta automatically notifies us when you remove the app. We open a deletion request, generate a reference code, and complete the deletion within 30 days. You can check the status at any time by appending the code to this page's URL, for example /data-deletion?code=<your-reference>.

When we fulfil a deletion request, we remove the personal data we control:

• Your account record, profile, password hash, and OAuth identifiers
• Chat transcripts and any free-text fields you submitted
• Integration tokens, API keys, and workspace settings tied to your account
• Operational logs that contain your IP address or device identifiers (older log entries roll off on the schedule documented in our Privacy Policy)

Where you also exist as an end customer on a merchant's storefront, we will additionally remove the data tied to your conversations on that store. The merchant may retain their own copy under their privacy policy — we recommend contacting them directly to delete that copy.

To meet legal and operational obligations, we retain a small set of records in an anonymised or pseudonymised form that cannot reasonably be used to re-identify you:

• Billing and tax records — typically 7 years from the transaction date, or longer where required by local tax law
• Audit log of deletion requests — confirmation code, requested-at and completed-at timestamps, and a hash of the original identifier
• Backups — a rolling 30-day window of database backups, after which your data is purged from the backup chain
• Security records — incident reports and forensic evidence retained only as needed to respond to an active investigation

We acknowledge every deletion request within 2 business days. The deletion itself is completed within 30 days of receipt — usually much sooner. When the request is complete:

• The status panel on this page flips to “completed”
• We email you a final confirmation if we have a contact address for you
• The associated data is purged from primary storage; backups expire on the rolling schedule above

If we are unable to complete a request (for example, because we could not verify your identity, or because the request was for data we do not control as processor on a merchant's behalf), we will explain the reason and what to do next.

If you already have a reference code, append it to the page URL — for example, ?code=abc123. The status panel at the top of the page will show the current state of your request.

Lost your code? Email privacy@askzoye.com from the address you used to make the original request and we will look it up.

We may update this page from time to time. Material changes will be reflected in the “Last updated” date at the top, and we will notify active merchants by email at least 30 days before any change that materially expands what we retain or shortens the deletion timeline.