Data Deletion Instructions

Axis Flow Digital may store the following when you use our platform:

• Account details (name, email, password hash, organization)
• Connected WhatsApp Business Account metadata (WABA ID, phone number IDs, encrypted long-lived access tokens, message templates, quality status)
• Conversation history (messages sent/received via Cloud API), contact data (phone numbers, names from WhatsApp profiles, custom attributes, tags)
• Connected Meta Ad Account metadata (ad account ID, currency, encrypted access tokens) and cached ad insights (campaigns, ad sets, ads, impressions, clicks, spend over the last 90 days)
• Audit logs (webhook delivery records, automation firings, broadcast logs)
• Billing records (subscription tier, invoice history, payment status)

The fastest way to delete most of your data is from inside the dashboard:

1. Disconnect WhatsApp Business Account: Settings → Phone Numbers → Delete (this removes the WABA, all phone numbers, templates, and revokes our access token).
2. Disconnect Meta Ad Accounts: Settings → AI Provider section is not applicable — for ad accounts, use Business Manager → Business Settings → Connected Apps → remove Axis Flow Digital. This revokes our access token; your cached campaign/insight data is purged within 24 hours.
3. Delete individual contacts: Contacts → open contact → Delete (each contact deletion is immediate; associated conversation rows are not removed automatically — contact support to remove conversations as well).
4. Delete API keys: Settings → API keys → Revoke.
5. Delete webhook endpoints: Settings → Webhooks → Delete.

To delete your entire Axis Flow account and all associated data (organization, users, conversations, contacts, broadcasts, billing records, audit logs), submit a request:

• Acknowledgement: within 2 business days of receiving your request.
• Verification: we may ask you to confirm the request from the email associated with the account, to prevent unauthorized deletion.
• Deletion completed: within 30 days of verification. This includes:
  • Database rows removed (or anonymized where retention is legally required)
  • Encrypted access tokens irrecoverably destroyed
  • Daily backups containing your data purged within 90 days
  • Webhook subscriptions and API keys revoked
• Confirmation: we send a final email confirming deletion is complete with a request reference number.

Some data may be retained beyond deletion to comply with Indonesian tax law, anti-money-laundering regulations, or active legal proceedings:

• Invoice and payment records — retained 10 years per Indonesian tax law
• Audit logs for security incidents — retained until investigation closes
• Aggregated, fully anonymized usage statistics (no personal identifiers) — may be retained indefinitely for product analytics

Where retention is legally required, the data is restricted to read-only access by our compliance team. It is not used for any other purpose.

If you connected your WhatsApp Business Account or Meta Ad Accounts via Facebook Embedded Signup, you can also revoke our app's access from your Facebook account directly. This will immediately stop us from making API calls on your behalf, but does not delete data already stored — please pair this with a deletion request email (Section 3) for complete removal.

1. Go to Facebook Business Integrations
2. Find "Axis Flow Digital" in the list
3. Click Remove
4. Then email us at info@axisflow.id to also delete the stored data on our side

For questions about this process, our compliance team is reachable at:

• Email: info@axisflow.id
• WhatsApp: +62 881-7560-000
• Postal address: Jatibening, Bekasi, Jawa Barat, Indonesia