Data Deletion Instructions

Qliento provides a WhatsApp Business automation platform. This page explains how you can request the deletion of your personal data and the data of your contacts that we process on your behalf.

This applies to any user whose data passes through Qliento, including data received via Meta’s WhatsApp Business Cloud API, data you upload directly, and data generated through your use of the platform (messages, campaigns, flows, AI agents, contacts).

• Your Qliento account (name, email, organization, hashed password)
• All WhatsApp profiles you have connected, along with their encrypted access tokens
• All contacts in your Qliento organization
• All messages (inbound and outbound) stored on our servers
• All flows, campaigns, AI agent configurations, and message templates
• All usage analytics tied to your account
• All media files (images, audio, video, documents) uploaded or received

The fastest way to delete your data is through the Qliento application itself:

1. Log in to app.qliento.com
2. Navigate to Paramètres → Zone dangereuse → Supprimer le compte
3. Confirm with the one-time verification code we send to your registered email
4. Your account and all associated data are deleted within 24 hours of confirmation

If you cannot access your Qliento account, or if you are an end user whose data Qliento processes on behalf of one of our customers, send a deletion request to:

privacy@qliento.com

In your email, include:

• The email address associated with your account
• Your phone number if you are an end user (the WhatsApp number that communicated with a Qliento customer)
• The name of the Qliento customer who contacted you, if known
• A brief statement confirming you are the owner of the data or have legal authority to request its deletion

We respond to every request within 30 days, as required by GDPR and similar regulations.

When you connect a WhatsApp Business number to Qliento via Meta’s Cloud API, we store:

• Your Meta-issued Phone Number ID and WhatsApp Business Account ID
• Your System User access token (encrypted at rest with AES-256-GCM and a per- deployment master key)
• Messages exchanged through your connected number

When you request deletion, we also unsubscribe our webhook from your WABA so Meta no longer forwards events to our servers. Your WABA itself is owned by Meta and must be deleted separately from your Meta Business account if that is your intent.

In line with our legal obligations, we may retain a minimal subset of data after a deletion request is processed:

• Billing and invoicing records (10 years, fiscal compliance)
• Security logs tied to fraud prevention (90 days, anonymized)
• Backups (up to 30 days before final purge)

All retained data is kept in encrypted archives accessible only to authorized personnel with a legitimate legal basis. Retained records cannot be used for any commercial, analytical, or training purpose.

• Self-service: data removed from live systems within 24 hours, from backups within 30 days
• Email request: acknowledgement within 72 hours, completion within 30 days
• Complex cases (multi-organization involvement, legal holds): we notify you of any extension in writing

Data controller: Qliento

Data protection contact: privacy@qliento.com

For general support: support@qliento.com

Privacy Policy — Terms of Service