Data Deletion Instructions

1. Which situation are you in?

Allinaa Bot is a chatbot that businesses run on their own websites and messaging accounts. That changes who you should write to.

Either way, nobody gets turned away. If you write to us about a business we can identify, we will handle it.

2. You chatted with, or messaged, a business that uses Allinaa

2.1 The fastest route

Ask the business directly. It has a panel where it can see your conversation and your inquiry, and it can delete the files you sent. Say that you want your chat data and contact details deleted. The business can forward the request to us and we will carry it out.

2.2 Asking us instead

E-mail info@allinaa.com with the subject "Data deletion request" and, as far as you can, include:

1. The business you were talking to — its name or website address.
2. How you reached it — website chat, Telegram, WhatsApp, Facebook, Instagram, e-mail, a comment, a review, or another channel.
3. How to find your record: the e-mail address or phone number you gave, your inquiry reference (it looks like INQ-XXXXXX and appears in the confirmation e-mail), your username or handle on the channel, or roughly the date of the conversation.
4. What you want: deletion of everything, deletion of specific messages, deletion of a file you sent, or a copy of your data first.

We may ask one or two questions to be sure the request really concerns you. We will not ask for a copy of an identity document unless we genuinely cannot otherwise identify the record. We cannot delete a record we cannot identify, so the more detail you give, the better.

2.3 What happens next

1. We acknowledge your request by e-mail within 5 business days and give it a reference.
2. We identify the business that controls the data and inform it, because it is the controller.
3. Our staff carry out the deletion directly in the database and in the file storage. There is no self-service delete button for a conversation today, so a person at Allinaa does this work.
4. We confirm by e-mail what was deleted, and tell you about anything we had to keep and why.
5. The whole process is completed within 30 days. If it will take longer because the request is complex, we tell you and explain.

3. You are a business that uses Allinaa Bot

You can ask us to delete:

• one customer's conversation, inquiry, case, quote, contact record and channel identity;
• all conversations and inquiries older than a date you choose;
• everything for one connected channel;
• your generated reports, which contain inquiry details and chat transcripts;
• the stored copies of e-mails we sent on your behalf;
• a team account and its audit history (we will tell you if a security record has to stay);
• your whole business and all its data, when you leave.

Write to info@allinaa.com from an e-mail address that belongs to an owner or administrator of the business, say exactly what should be deleted, and name the business. If you want an export first, ask for it in the same e-mail and we will produce a copy before deleting.

4. You reached a business through Facebook, Instagram, WhatsApp, Telegram, Google or another platform

If you messaged a business, or commented or left a review, on a platform it has connected to Allinaa, we hold the identifier the platform gave us, the public name on your profile, the message or comment text, and any file you attached. The list per platform is in our Privacy Policy, section 7.

4.1 How to ask for that data to be deleted

1. E-mail info@allinaa.com with the subject "Data deletion request".
2. Name the platform (for example Facebook, Instagram, WhatsApp, Telegram, LINE, Viber, WeChat, X, Discord, TikTok, YouTube, LinkedIn, Threads, Google Business Profile, or e-mail).
3. Give the business or page you were in contact with.
4. Give your handle, username, display name or phone number as it appears on that platform, and roughly when you wrote.

We will locate the thread, delete the messages, the contact record and the identity row, and delete any files you sent. We confirm by e-mail.

4.2 You can also cut off access at the platform

• Google (YouTube, Business Profile): the business can revoke Allinaa's access through the Google security settings page at security.google.com/settings/security/permissions (the same list is also reachable at myaccount.google.com/permissions). For YouTube, disconnecting immediately anonymises everything that connection read, and any remaining YouTube data is deleted within 7 calendar days.
• Facebook / Instagram: a business can remove the Allinaa app from its Business settings; a person can remove app access in their Facebook settings. That stops new data reaching us. Data already received is deleted when you ask us, as above.
• Telegram: blocking the bot stops it messaging you, and we mark that thread blocked. It does not delete the earlier messages — ask us for that.
• Any channel: the business can disconnect it in its Allinaa cabinet. See section 8 for what that does and does not remove.

5. What we delete, and what we keep

5.1 What we delete on request

• The full text of your chat messages and of the assistant's replies to you, including the stored copy of each reply.
• Your visitor session record.
• Your inquiry, booking, problem report and quote records, including name, e-mail address, phone number, your message, the AI summary and the booking time zone.
• Your contact record, your channel identity rows and the conversation thread, including the public display name the platform gave us.
• Internal notes about your conversation.
• Files you sent, and the metadata rows about them, including the file name, the hash and any facts the assistant extracted from an image.
• Records from an earlier version of the product that still hold a name, phone number, e-mail address and a free-text note about you. These are kept read-only for history and are never deleted on a timer, so they are part of every deletion we carry out.
• Requests to correct a specific reply, which keep the full text of the reply that was sent to you, together with the question used to check the correction and the answer it produced.
• The stored copies of the e-mails that were sent about your inquiry, which contain your name, phone number and e-mail address.
• Follow-up records about you.
• Report text that quotes your conversation, where a report has been generated for that period.

5.2 What may stay, and why

• Records we must keep by law, such as accounting and tax records of a payment, for the period the law requires.
• Security and abuse records. Our audit log records which account took which action in the management panels, with a time, a route and an IP address. We can delete entries about you on request, but where an entry is evidence of a security incident or is needed to defend a legal claim, we may keep it until that need ends, and we will say so.
• Counts without content. We keep aggregate AI usage records — business, date, model, token counts and cost. They contain no prompts, replies, names or contact details, so there is nothing personal in them to delete.
• De-duplication rows. For messaging channels we keep an empty event row holding only the provider's event id, so that if the platform redelivers the same message it is not processed again. It carries no message content.
• Safety copies of the database. We take a database snapshot before each software release and keep it as a safety copy. A snapshot is not edited, so data you asked us to delete can still exist in a snapshot taken before the deletion. Those snapshots are deleted by hand, and we will not promise you a rotation window we do not operate: there is no scheduled job that deletes them after a fixed number of days today. They are never used to answer a request, only to restore the service after a failure, and if we ever restore one we re-apply the deletions we have carried out since it was taken.
• Data the platform itself holds. Deleting your data at Allinaa does not delete anything in your Facebook, Instagram, WhatsApp, Telegram, Google or other account. Use that platform's own settings for that.
• Data the business copied elsewhere. If the business exported your inquiry to a CSV file, to a Google Sheet, to its CRM or to a Telegram chat, that copy is outside our systems and only the business can remove it. We will tell the business to do so when it is part of your request.

6. What we already delete automatically

These deletions happen without anyone asking. We list them exactly, and we do not claim more.

7. What you can delete yourself right now

Being precise matters here, so here is the honest state of the product today.

8. Disconnecting a channel: what that removes

A business can disconnect any connected channel at any time in its cabinet, under Connections → the channel → Disconnect.

8.1 What disconnecting always does

• Deletes the stored credentials for that connection — the token, secret or key — from our encrypted store.
• Stops the webhook or polling, so no new message, comment or review from that account reaches us.
• Stops all sending on that channel.
• Where the platform supports it, removes our webhook subscription or revokes the access grant at the platform.

8.2 What it does not do

• YouTube is the exception: disconnecting anonymises everything that connection read, immediately.
• Files that arrived over a channel still follow the normal 30-day rule for their contents, with the metadata row kept.
• Delivery records of replies already sent are kept as part of the business's history.

So if you want a clean removal, do both: disconnect the channel, then e-mail info@allinaa.com and ask us to delete the data from that channel. We will confirm when it is done.

9. Closing an Allinaa account or business

• Disabling an account ends its sessions and its access. It does not delete the account record or the memberships, which are kept as a record of who had access.
• Deactivating a business stops the chatbot answering and hides the business from the service. It does not remove any data.
• To have everything deleted, write to info@allinaa.com from the owner's address and say that you want the business and all of its data deleted. Ask for an export first if you want one. Our staff then delete the business's conversations, inquiries, cases, quotes, contacts, threads, notes, files, reports, stored e-mails and team records, keeping only what section 5.2 describes.
• After a subscription ends, ask us within 30 days if you want an export; see the Terms of Service, section 15.

10. Timing, confirmation and refusals

• Acknowledgement: within 5 business days, by e-mail, with a reference.
• Completion: by the deadline for that kind of data, counted from the request or from the point at which we could identify the record. The platforms set different deadlines and we follow the shortest one that applies:

  Data	Completed within
  YouTube data (comments, author names, the stored Google authorisation) — also when a user revokes access inside Allinaa	7 calendar days
  Telegram data	Without undue delay; our target is 7 days
  Meta Platform Data (WhatsApp, Messenger, Instagram, Facebook and Instagram comments, Threads)	Promptly; our target is 7 days
  Everything else	Up to 30 days

  If more time is needed for the 30-day category we tell you why before the 30 days are up. The platform deadlines above are not extended.
• Confirmation: we e-mail you a human-readable summary of what was deleted, what was kept, and why.
• Cost: free. We do not charge for a deletion or access request.
• We do not wait for the business. For data that reached us through Meta, Telegram, Google or any other connected platform, we delete on the request of the person the data is about within the deadline above even if the business does not respond to us. We tell the business afterwards and record the action in our audit log. The business being slow, silent or unreachable is never a reason for us to leave your request unanswered.
• If we cannot act: there are exactly two reasons, and we will tell you which one applies and what you can do next, including your right to complain to a data protection authority. (1) We cannot identify the record from the details given — the more detail you give, the less likely this is. (2) A legal obligation requires us to keep a record for a period, or a specific entry is evidence of a security incident or is needed to defend a legal claim; in that case we say which record and until when, and we delete it when the need ends.
• Automated deletion callback: Allinaa does not currently operate an automated data deletion request callback endpoint for any platform. Requests are handled by a person at the address below, on the timeline above. We state this so that no platform or user expects an automated flow that does not exist.

11. Contact

Back to top ↑

---