User Data Deletion

1. Who can request deletion?

• Data subjects who interacted with systems operated by Genbia on behalf of a client (for example, contacts in WhatsApp workflows or forms).
• Authorized representatives of business clients who contracted integrations or development from us.
• Users who submitted data through Genbia.com (contact forms, email, or channels published on the site).

2. What data can be deleted?

Depending on the project scope, we can address requests regarding data under Genbia's direct control, for example:

• Access tokens, API credentials, and webhook configurations managed by us.
• Message logs, automation events, and technical records stored in our environments.
• Contact data and workflow configuration associated with the project.
• Conversations, message metadata, and account configuration in the WhatsApp CRM hosted by GENBIA.
• Information submitted through the website or emails directed to our commercial channels.

Data stored exclusively in client accounts (Meta Business Manager, proprietary CRM, client servers) must also be managed with those providers. We will cooperate with the client to revoke access that Genbia administers.

3. How to request deletion

Send an email to [email protected] with the subject line "Data deletion request" and include:

• Full name and, if applicable, the company you represent.
• Email or phone number we can use to identify the request.
• Linked asset (WhatsApp Business number, page ID, project domain, app URL, etc.).
• Type of data you wish to delete and brief reason (optional).
• Copy of a document proving legal representation, if acting on behalf of a company.

4. Response timeframe

We will confirm receipt of the request and respond within a maximum of ten (10) business days, unless technical complexity or a legal obligation to retain certain records applies. In that case, we will inform you of the reason and the estimated additional timeframe.

5. What happens after deletion?

• Deactivation of automated workflows linked to the requested scope, where applicable.
• Revocation of tokens and technical access that Genbia administers.
• Deletion or anonymization of information in systems under our control, except where retention is required by law or encrypted backup with a defined lifecycle.
• Notification to the business client, if the request comes from an end user of a B2B project and the contract requires it.

6. More information

To learn how we collect and use data, review our privacy policy at https://genbia.com/privacy-policy.

For general inquiries or commercial support: [email protected] and the contact page at https://genbia.com/contact.