How to delete your data

Who this applies to

This page applies to: (a) businesses that connected a WhatsApp Business account to swaru through Meta's Embedded Signup, and their operator accounts; (b) end customers who messaged a business on WhatsApp that uses swaru; and (c) people who submitted the "request access" form on our website.

If you are a business

Disconnecting your WhatsApp number in the console deletes the stored access token and PIN and stops swaru answering on that number. The identifiers and conversation history stay until you ask.

To delete your whole account or a number's history, write to info@swaru.app from the operator email registered on the account, or include the WhatsApp Business Account ID or the phone number and the business name.

swaru acknowledges within 5 business days and completes the deletion within 30 days, confirmed by email. What is removed: the access token, PIN, WhatsApp Business Account and phone number identifiers, conversations, messages, notes, labels, ratings and raw webhook payloads. Data we must keep under a legal retention duty is kept only for as long as the law requires.

Revoking swaru in Facebook's Business Integrations settings stops swaru's access but does not delete stored data, so write to us as well.

If you are an end customer

swaru processes your messages on behalf of the business you wrote to, which is the data controller for your data. Because of that, the main way to ask for your data to be deleted is to write directly to that business: swaru carries out the deletion on its instruction, within 30 days.

You may also write to us at info@swaru.app with the business name and your phone number. We will forward your request to the business and confirm once it is complete.

If you submitted the request access form

Write to us at info@swaru.app from the same email address you used for the form. We will remove your data within 30 days.

Data obtained through Meta's platform

Through Meta's platform we obtain the WhatsApp Business Account identifier, the phone number identifier, the access token, the customer's number, profile name, message content and delivery statuses. We use them only to provide the service; we never sell them or use them for advertising or profiling, and we share them only with the sub-processors in the privacy policy.

Disconnecting a number deletes the access token and PIN. The identifiers and conversation history are deleted within 30 days after the business asks or the agreement ends.

What this deletion does not cover

We do not delete aggregated statistics that identify no one, or records the law requires us to keep.