Data Deletion
You can ask Ramflo to delete your personal data. This page explains how, what happens, and what we have to keep.
In short
- Email us and tell us whose data to delete. We check it is really you or an authorised person.
- We delete your data, except a small record that keeps your opt-out working and records we must keep by law.
- Want messages to stop right away? Reply STOP to any WhatsApp message, or use the unsubscribe link in any email.
Who can ask
- A person who received a message sent through Ramflo by a business, or whose contact details a business added.
- A client business that uses Ramflo and wants its account and the data in it deleted. The request must come from an authorised owner of the account.
- A person who signed in to Ramflo as a client's staff member.
How to ask
- Email support@ramflo.io with the subject Data deletion request.
- Tell us the phone number or email address we hold for you (the one the messages were sent to), your name, and if you know it, the name of the business that messaged you. Clients should give their organisation name and the owner's sign-in email.
- We may ask you to confirm your identity, for example by replying from the email address concerned or from the WhatsApp number concerned. We do this to protect you from someone else asking for your data to be deleted.
- We tell you when the deletion is done, or why we could not do all of it.
Please do not send passwords, card numbers or government ID numbers in your email.
What we delete
- The contact record: name, phone number, email address and any other fields held about you.
- Messages sent to and received from you, and conversation threads, in Ramflo.
- For a client account: the organisation's contacts, messages, settings, connected-account details and stored access tokens or credentials.
- We also ask our sub-processors listed in the Privacy Policy to remove data they hold on our behalf where we can.
What we keep and why
- A minimal opt-out record (your phone number or email address and the fact that you opted out). We keep it so that we, and the business that messaged you, do not contact you again. If you want this removed too, tell us, and we will explain the effect: it may allow a business to add you again.
- Audit and security logs of administrative actions, kept for 12 months to protect the service and meet legal duties. They avoid holding message content.
- Records the law requires us to keep, such as invoices and tax records, for as long as the law requires.
- Backups, which are removed as they rotate out, within 35 days.
Meta (WhatsApp) and email providers keep their own copies under their own policies. To delete data they hold, contact them directly.
How long it takes
We complete deletion requests within 30 days of confirming your identity. If we need more time or cannot do part of it, we tell you why.
If a business that messaged you is the one deciding how your data is used, we may pass your request on to it and help it respond. See "Your rights" in the Privacy Policy, including how to reach our Grievance Officer.