User Data Deletion

Last updated: May 1, 2026

This page explains how users (including end-customers who interacted with a business that uses Wave Inbox, and business operators who use the platform) can request the deletion of their personal data from our systems.

1. What Data We Hold

Depending on how you interacted with Wave Inbox, we may hold:

End-customers (you messaged a business via WhatsApp / Messenger / Instagram): your contact identifier (phone number, PSID, or IGSID), display name, profile picture, message content, and conversation metadata.
Business operators: account email, name, authentication credentials, connected channel tokens, and configuration data.

Full details are in our Privacy Policy.

2. How to Request Deletion

Option A — Email request (recommended)

Send an email to privacy@waveinbox.space with the subject line:

Data Deletion Request

Include in the body:

Your identifier — phone number (E.164 format) for WhatsApp users, Instagram username for IG users, Facebook profile link for Messenger users, or account email for business operators.
The name of the business you messaged (helps us locate the correct workspace).
Confirmation that you are the account owner or authorized representative.

Option B — Through the business directly

Since Wave Inbox acts as a data processor on behalf of businesses (data controllers), you may also contact the business you exchanged messages with directly. They can delete your data from their workspace, which removes it from our systems for their account.

Option C — Self-service (business operators only)

If you are a business operator with a Wave Inbox account, you can delete individual contacts and conversations directly from the Inbox interface, or request full account deletion via your account settings.

3. Response Time

We confirm receipt of deletion requests within 72 hours and complete the deletion within 30 days of receipt, in compliance with GDPR (Article 17), LGPD (Article 18), and equivalent privacy regulations.

4. What Gets Deleted

All message content (text, voice, images, documents) associated with your identifier.
Contact records (name, profile picture, tags, sector assignments).
Conversation metadata (timestamps, delivery receipts, attribution data).
For business operators: account credentials, channel tokens, and configuration data.

5. What May Be Retained

We may retain limited information when legally required:

Transactional records (payment confirmations, invoices) for up to 5 years for Brazilian tax compliance.
Audit and security logs for up to 12 months for fraud prevention.
Aggregated and anonymized analytics that cannot be linked back to you.

6. Meta Platform Data

If your data was received from Meta (WhatsApp, Messenger, Instagram), our deletion follows Meta's Platform Terms requirements. Note that Meta itself retains its own copies of data on its platforms — to delete data from Meta's systems, you must contact Meta directly through their respective apps.

7. Confirmation

Upon completion, we send a written confirmation to the email address provided in your request. If we cannot fulfill your request (e.g., we don't hold the data, or it falls under legal retention exceptions), we will explain why within the same 30-day window.

8. Contact

For data deletion requests or questions about this process:

Wave Inbox — Privacy Team
Email: privacy@waveinbox.space
Data Protection Officer: dpo@waveinbox.space