Data Deletion Instructions

How to submit a deletion request

You can request deletion of your data in any of the following ways. All routes reach the same team and the same SLA applies.

Data received via Facebook, Instagram, or WhatsApp

Zvani uses Meta’s platforms to provide messaging and social features to our business customers. If you are a Facebook user, Instagram user, or WhatsApp user whose data has been received by Zvani through these platforms, you may request deletion of that data as described on this page.

Facebook Login users

If you signed into a Zvani product using Facebook Login, the data Zvani received from Facebook is limited to your name, email address, and profile picture, plus any business assets you explicitly granted access to. To delete this data:

1. Revoke Zvani’s access in your Facebook account settings (Settings → Apps and Websites → Zvani → Remove).
2. Email privacy@zvaniai.com with the subject “User Data Deletion Request” so we can complete deletion on Zvani’s side within 30 days.

Instagram users

If you sent a direct message or comment to an Instagram account that uses Zvani’s automation, Zvani may have processed your Instagram handle, message content, and the timestamp of the interaction on behalf of that business. To request deletion, email privacy@zvaniai.com and include the Instagram handle you used and (if known) the business account you contacted.

WhatsApp users

If you exchanged WhatsApp messages with a business that uses Zvani, your phone number, message content, and conversation metadata may have been processed on that business’s behalf. To request deletion, email privacy@zvaniai.com and include the phone number and the business name. You can also block the business in WhatsApp to stop further messages.

Note: Meta is the data controller for your Facebook / Instagram / WhatsApp account itself. To delete your account on those platforms, please use Meta’s own deletion tools.

Data we hold about Zvani dashboard customers

If you signed up for the Zvani dashboard as a business customer, the personal data we hold includes your name, email, organisation details, billing information, and audit logs of your dashboard activity.

You have two options:

• Account deletion. Email privacy@zvaniai.com from the address on your account. We confirm, then delete the account and all associated data within 30 days, except records we are legally required to retain (see below).
• Selective deletion. If you want to delete specific data (a particular caller, a specific time range, certain integrations) without closing the account, tell us which data in the same email.

A self-service “Delete account” control is being built into the dashboard. Until it ships, email is the canonical channel and is acted on in exactly the same way.

Data about callers handled on a business’s behalf

When a caller speaks to a business through Zvani, the business is the data controller for that conversation and Zvani is the data processor. If you are the caller and want your data deleted:

• Ask the business directly — they are the primary contact for caller-data requests.
• Or email privacy@zvaniai.com and we will route your request to the relevant business and assist in completing the deletion on the platform side.

What we delete

Subject to the retention exceptions below, deletion removes:

• Your profile and contact data on Zvani
• Conversation transcripts and call audio recordings
• Message bodies and attachments
• Integration tokens and credentials you authorised
• Derived data such as embeddings and indexes built from your content
• Backups containing your data, on the standard 30-day backup roll-off

Where data has been shared with sub-processors (cloud, LLM providers, telephony carriers, etc.), Zvani triggers deletion on those systems too, per our agreements with them. The full list of sub-processors is at /subprocessors.

What we may need to retain

We may retain specific records after a deletion request to comply with law or to protect legitimate interests. These include:

• Tax and accounting records — billing invoices and payment records, typically for 7 years under Indian tax law.
• Security and audit logs — basic event logs retained for forensic and compliance purposes, typically for 12 to 24 months.
• Consent and acceptance records — the fact that you accepted (or later withdrew) a legal document, retained for evidence under DPDP and GDPR. These records contain only metadata, not your content.
• Records under active legal hold — any data subject to a regulatory investigation, court order, or ongoing dispute.

Where we retain anything under these exceptions, we keep only what is strictly required for the stated purpose.

Timeline

1. Within 48 hours of receiving your request, we acknowledge it and confirm what we need to verify your identity.
2. Within 30 days of identity verification, we complete deletion and confirm in writing.
3. Within 90 days deletion propagates through encrypted backups via standard backup roll-off.