User Data Deletion Instructions

How to Submit a Data Deletion Request

Send your data deletion request to:

Required email subject: Data Deletion Request – AADPlus

Your request should include:

• Your full name;
• Your company or business name, where applicable;
• The email address associated with your AADPlus account;
• The telephone or WhatsApp number associated with the request;
• Your WhatsApp Business Account ID, if available;
• Your WhatsApp Phone Number ID, if available;
• A clear description of the information you want deleted; and
• Whether you also want the AADPlus integration disconnected from Meta or WhatsApp.

Do not send passwords, one-time passwords, access tokens, payment card details, or other authentication secrets by email.

Identity and Authority Verification

To protect users and clients from unauthorized deletion, AADPlus may verify:

• The requester’s identity;
• Ownership of or authorization over the relevant AADPlus account;
• Authority to act for the relevant company;
• Ownership of or authorized access to the relevant WhatsApp Business Account; and
• The telephone number or email address associated with the account.

We will only request information reasonably necessary to verify and process the request.

Requests from WhatsApp Recipients

If you received WhatsApp messages from a business using AADPlus services, that business normally controls your customer information.

You may:

• Ask the business directly to delete your information;
• Reply “STOP,” “UNSUBSCRIBE,” or a similar opt-out instruction;
• Block the business on WhatsApp; or
• Contact AADPlus at info@aadplus.com if you believe your information is processed through our platform.

AADPlus may forward the request to the relevant business client and will provide reasonable assistance where AADPlus acts as its Data Processor or Service Provider.

Disconnecting AADPlus from Meta or WhatsApp

A client may disconnect the AADPlus application through:

• AADPlus WhatsApp CRM integration settings; or
• Meta Business Settings or Business Integrations.

Disconnecting the application stops future authorized access after the disconnection is completed.

Disconnection does not necessarily delete information previously stored in AADPlus systems. To request deletion of previously stored information, submit a Data Deletion Request using the email instructions above.

Information That May Be Deleted

A valid request may cover:

• AADPlus account and user-profile information;
• Meta Business Portfolio information;
• WhatsApp Business Account ID;
• WhatsApp Phone Number ID;
• Business profile and display-name information;
• Meta or WhatsApp access tokens and authorization records;
• Contacts and uploaded customer lists;
• WhatsApp message content and media;
• Message IDs, timestamps, and delivery statuses;
• Templates and template records;
• Campaigns, segments, tags, and automation records;
• Inbox conversations and internal notes;
• Support records;
• Technical and usage information; and
• Other personal information connected with the verified account.

What Happens After a Request

After receiving a valid request, AADPlus will:

1. Acknowledge the request, normally within seven days;
2. Verify the requester’s identity and authority;
3. Identify relevant information in AADPlus-controlled systems;
4. Disconnect applicable Meta or WhatsApp integrations where requested;
5. Revoke or delete applicable access tokens;
6. Delete or anonymize relevant information from active systems;
7. Disable future processing and webhook handling where applicable;
8. Record completion of the request; and
9. Provide confirmation where reasonably possible.

We aim to complete valid deletion requests within 30 days. Additional time may be required where a request is complex, affects multiple systems, or applicable law permits an extension.

Backup Deletion

Information deleted from active systems may remain temporarily in protected backup copies.

Backup copies are not used for ordinary business operations and will be deleted or overwritten through the standard backup cycle, normally within 90 days.

If a backup is restored before expiry, the deletion request will be reapplied where technically and legally required.

Information We May Retain

AADPlus may retain limited information where reasonably necessary to:

• Comply with legal, tax, accounting, or regulatory obligations;
• Maintain invoices and transaction records;
• Prevent fraud, abuse, spam, or security threats;
• Resolve disputes;
• Establish, exercise, or defend legal claims;
• Enforce contractual rights;
• Maintain evidence that a deletion request was completed; or
• Maintain a minimal opt-out or suppression record so that a recipient is not contacted again.

Information retained for these purposes will not be used for unrelated marketing or messaging.

Meta and WhatsApp Data

AADPlus can delete only information controlled or stored by AADPlus.

Meta and WhatsApp may independently retain information under their own terms, legal obligations, and privacy policies. Requests relating to information controlled directly by Meta or WhatsApp may need to be submitted through their respective privacy tools.

• Meta Privacy Policy
• WhatsApp Business Terms

Deletion Confirmation

After completing a verified request, AADPlus will provide confirmation by email where reasonably possible.

The confirmation may state:

• The request reference;
• The account or service covered;
• The categories of information deleted;
• Whether the integration was disconnected;
• Whether tokens were revoked;
• Whether limited information was legally retained; and
• The expected backup-expiry period.