Privacy & Data Rights
Data Deletion Process
You have the right to request complete deletion of your personal data from Amezly's systems. This page explains exactly what gets deleted, what we are legally required to retain, and how to submit your request.
30 days
Max deletion time
72 hrs
Confirmation response
100%
Free of charge
DPDPA
2023 compliant
Your Data Rights
Under India's Digital Personal Data Protection Act, 2023 (DPDPA) and international best practices, you have the right to request erasure of your personal data held by Amezly Technologies. We are committed to honouring these rights fully and transparently.
Right to Erasure
Request deletion of all personal data we hold about you. We will permanently erase it from our active systems within 30 days of verification.
Right to Data Portability
Before deletion, you can request a full export of your data in JSON or CSV format. You have 7 days to download your export after it's generated.
Right to Correction
If any of your personal data held by Amezly is inaccurate, you can request correction at any time from your Account Settings or by contacting privacy@amezly.com.
Right to Object
You may object to processing of your personal data for direct marketing, profiling, or analytics. We will stop that specific processing within 72 hours of your request.
DPDPA 2023 — India's Data Protection Law
The Digital Personal Data Protection Act 2023 grants Indian citizens strong data rights. Amezly is fully compliant and will process all deletion requests within the statutory 30-day window. You may also lodge a complaint with the Data Protection Board of India if you believe your rights have been violated.
What Gets Deleted vs Retained
When your deletion request is processed, we permanently erase all personal data from our active systems. However, we are legally required to retain certain records for compliance with Indian tax law, financial regulations, and fraud prevention obligations.
🗑️ Permanently Deleted
- Your account profile (name, email, phone, photo)
- All chatbot conversation logs and transcripts
- Lead and contact records in your CRM
- Voice call recordings and transcripts
- WhatsApp message history
- Email campaign data and open/click tracking
- Analytics event data linked to your identity
- API keys and webhook configurations
- Widget configuration and embed settings
- Uploaded documents, FAQs, and product catalogues
- Team member accounts linked to your organisation
- All cookies and session tokens
📁 Legally Retained
- Invoice records (7 years — Income Tax Act 1961)
- GST transaction records (7 years — CGST Act)
- Payment confirmation receipts (Razorpay records)
- Fraud and abuse prevention logs (anonymised)
- Legal dispute records (if a dispute is active)
- Regulatory compliance audit trails
- Anonymised aggregate analytics (no PII)
All retained records are stored in isolated, access-controlled archives and are not used for any marketing or product purposes. They are deleted as soon as the legal retention period expires.
Want your data before deletion?
You can request a full export of your data (JSON + CSV) before submitting a deletion request. Go to Dashboard → Settings → Privacy → Export My Data, or email privacy@amezly.com. Export is ready within 48 hours and available for 7 days.
Deletion Timeline
Here is exactly what happens after you submit a deletion request — step by step, with committed timeframes at every stage.
📬
Step 1
Request Received
You submit the deletion request form below, or email privacy@amezly.com. Your request is logged in our privacy management system with a unique reference number.
⚡ Instant — auto-confirmation email sent immediately
🪪
Step 2
Identity Verification
We verify your identity to prevent fraudulent deletion of others' data. For account holders, we send a verification link to your registered email. For social login users (Google/Facebook), we may ask for an additional confirmation step.
⏱️ Within 24 hours of submission
💡
If you no longer have access to your registered email, contact us at privacy@amezly.com with your organisation name and last invoice number for alternative verification.
🔎
Step 3
Data Mapping & Review
Our data protection team maps all personal data associated with your account across every system — PostgreSQL databases, ClickHouse analytics, file storage, email archives, and backup systems. We check for any active legal holds (ongoing disputes, open invoices) that may affect scope.
⏱️ Within 7 days of verification
🗑️
Step 4
Active Data Deletion
Personal data is permanently deleted from all active databases, object storage, search indexes, and caches. This includes your account record, conversation logs, CRM data, uploaded files, API keys, and analytics events. Your account is deactivated immediately.
⏱️ Within 14 days of verification
🔒
Deletion from active systems uses cryptographic erasure for encrypted data fields and secure overwrite for file storage — ensuring data cannot be recovered even from storage media.
🗄️
Step 5
Backup Purge
Your data is flagged for purge in our automated backup rotation cycle. Encrypted backups containing your data are overwritten as part of our standard 30-day backup rotation. New backups created after Step 4 will not contain your personal data.
⏱️ Within 30 days of deletion request
✅
Step 6
Completion Certificate
We send you a signed Data Deletion Completion Certificate via email — confirming what was deleted, the date of deletion, and which categories of data were legally retained and why. Keep this for your records.
⏱️ Within 30 days of request — by email
Data Categories & Retention Periods
The table below lists every category of personal data Amezly holds, where it is stored, and how quickly it is deleted upon a valid request.
| Data Category | Where Stored | Deletion Timeline | Legal Basis for Retention (if any) |
|---|---|---|---|
| Account profile (name, email, phone) | PostgreSQL — users table | Immediate | None — deleted on request |
| Chatbot conversation logs | PostgreSQL — messages table | Immediate | None — deleted on request |
| Voice call recordings | Object storage (S3-compatible) | Immediate | None — deleted on request |
| CRM leads & contacts | PostgreSQL — leads/contacts tables | Immediate | None — deleted on request |
| WhatsApp message history | PostgreSQL + MSG91 logs | Within 30 days | MSG91 retention policy (30 days) |
| Analytics events (ClickHouse) | ClickHouse — events table | Immediate | Aggregate anonymised data retained |
| Email campaign data | PostgreSQL + Stalwart mail | Within 30 days | None — deleted on request |
| Uploaded files (FAQs, catalogues) | Object storage | Immediate | None — deleted on request |
| Payment records & invoices | PostgreSQL + Razorpay | 7 years | Income Tax Act 1961 / CGST Act — mandatory |
| GST invoice data | Accounting system | 7 years | CGST Act 2017 — statutory requirement |
| Fraud / abuse prevention logs | Isolated security archive | 90 days post-deletion | Fraud prevention — anonymised after account deletion |
| Backup snapshots | Encrypted backup storage | 30-day rotation | Overwritten in standard backup cycle |
Third-Party Data
Some of your data may also be held by third-party services that Amezly integrates with. Deleting your Amezly account does not automatically delete data from these services — you may need to contact them separately.
Auto-notified
Razorpay
Payment processor. Holds payment method tokens and transaction records. Razorpay retains financial records for 7 years per RBI regulations.
Manual request
Google Analytics
Holds anonymised session data associated with your website visits. Use Google's opt-out tool or contact Google directly to request deletion.
Manual request
MSG91 (WhatsApp / SMS)
Holds WhatsApp and SMS message logs for up to 30 days. We notify MSG91 of your deletion; they process their own retention separately.
Auto-notified
Vobiz (Voice Calls)
Holds call records and recordings associated with your DID. We notify Vobiz on deletion; call logs are removed from their system within 30 days.
Manual request
Meta (Facebook / Instagram)
If you connected a Facebook account or used Meta Pixel, Meta may hold activity data. Request deletion directly via Meta's Privacy Centre.
Manual request
OpenRouter / LLM APIs
Conversation messages may be processed via OpenRouter. Per their privacy policy, prompts are not stored beyond the session. No deletion action required.
Submit a Deletion Request
This action is permanent and irreversible
Once your deletion request is verified and processed, your data cannot be recovered. Please ensure you have downloaded any data you need before submitting. You will lose access to your Amezly dashboard immediately upon verification.
Export your data first (recommended)
Download all your data before requesting deletion: Dashboard → Settings → Privacy → Export My Data. Your export (JSON + CSV) will be ready within 48 hours and available for 7 days.
🗑️ Data Deletion Request Form
Fill in the details below. We will verify your identity and confirm receipt within 72 hours. All fields marked * are required.
Prefer to email?
Send your request to privacy@amezly.com with the subject line "Data Deletion Request — [Your Registered Email]". Include your full name, registered email, and organisation name. We will respond within 72 hours.
What Happens After Deletion
Once your deletion is complete, here is what changes:
- → Your Amezly dashboard, login, and all access are permanently deactivated. You cannot log back in.
- → Your AI chatbot widget stops working on your website immediately. The widget will show an offline message or become invisible depending on your configuration.
- → Any WhatsApp automations and voice agent integrations connected to your account are immediately deactivated.
- → Your API keys are revoked. Any third-party services calling the Amezly API with your keys will receive 401 Unauthorized errors.
- → If you were on a paid plan, your subscription is cancelled immediately. No further charges will be made. Unused days in the billing cycle are not refunded (see Refund Policy).
- → You will receive a Deletion Completion Certificate by email within 30 days confirming what was deleted and the date of deletion.
Changed your mind? You can sign up again.
After deletion, you are free to create a new Amezly account at any time using the same or a different email address. Your previous data will not be restored — the new account starts fresh. There is no cooling-off period or waiting time.
Contact Our Data Protection Officer
For questions about data deletion, your rights, or the status of an existing deletion request, contact our Data Protection Officer directly. We are committed to responding within 72 hours on working days.
Data Protection Officer
Amezly Technologies — Responsible for all data privacy, deletion, and compliance matters under DPDPA 2023.
📧 Email: privacy@amezly.com
📋 Subject line: "Data Deletion — [Your Ref Number]"
📍 Address: Koramangala, Bangalore – 560034, Karnataka, India
⏱️ Response SLA: 72 hours (Mon–Fri, 10 AM–6 PM IST)
📅 Completion deadline: 30 days from verified request
Read Our Privacy Policy
Data deletion is one part of our privacy commitment. Read our full Privacy Policy to understand how we collect, use, and protect your data.