Data Deletion Policy

What we store

For each business, Upvort stores only what that business needs to run its own WhatsApp: its chats and messages, its contacts, its templates, its campaigns, and orders taken on WhatsApp. All of it is stored per business: one business never sees another business's data. Personal data is never sold, and it is never shared across businesses.

How to request deletion

There are two ways. First, through Meta: when a person asks Meta to delete their data for this app, Meta sends Upvort a signed deletion request. Upvort checks the signature against its configured App Secret and then deletes the matching data automatically. Second, through the business: ask the business whose chats you are in, and that business's admin can remove your contact and chat data from that business.

What is deleted

On a signed request, Upvort deletes every row that matches the requester's identifier exactly: chats, messages, contacts, labels, tags, notes, drafts, follow-ups, and local WhatsApp orders for that identifier. Panel login accounts are not deleted by the Meta request; the business admin removes those separately. Messages already stored on Meta's own systems are Meta's responsibility and are not deleted by Upvort.

Confirmation

After a signed request, Upvort returns a confirmation code and a status address. Opening the status address shows whether matching data was found and deleted, or no matching data was found. Nothing is claimed when nothing is found. Only the request record itself (confirmation code, date, and counts) is kept, so the status can be checked later; the requester's identifier is stored only as a one-way hash, never in plain text.

This page describes how deletion works. It states no status granted by anyone else.