Data Deletion

1. Overview

Leadzap is a WhatsApp and Instagram CRM operated by Al Mufaddal Computers (Mumbai, India). This page explains how to request deletion of your personal data from our systems, in accordance with India's Digital Personal Data Protection Act 2023 and Meta's Platform Terms.

There are two kinds of deletion requests:

• Account holder requests — you signed up for Leadzap and have an account at app.leadzap.co.in.
• End-customer requests — you are not a Leadzap account holder, but a business that uses Leadzap has stored your WhatsApp or Instagram conversation history with them. You want that business to delete your data from their Leadzap tenant.

2. If you are a Leadzap account holder

You can request full deletion of your account and all data associated with it.

How to submit the request:

1. Send an email from the email address registered on your Leadzap account to saifuddin@almufaddal.com with the subject line "Data Deletion Request — Account Holder".
2. Include in the body: your registered name, business name, and the connected channels (WhatsApp number and/or Instagram username) you want deleted.
3. We will acknowledge your request within 7 days and confirm completion within 30 days.

📧 Send deletion request

3. If you are a customer whose messages were stored

If a business uses Leadzap to manage their WhatsApp or Instagram inbox, and you've sent them messages, your conversation history with that business is stored inside their Leadzap tenant. You have the right to request deletion.

How to submit the request:

1. Contact the business directly first. They are the data controller for their customer conversations and they can delete your contact and messages from their Leadzap inbox immediately. This is usually the fastest path.
2. If you are unable to reach the business or they do not act on your request within a reasonable time, email us at saifuddin@almufaddal.com with the subject line "Data Deletion Request — End Customer".
3. Include in your email: the business name or WhatsApp number / Instagram username you were messaging, your own WhatsApp number or Instagram username, and a brief description of the conversation so we can identify the records.
4. We will verify the request, coordinate with the business if needed, and complete deletion within 30 days.

📧 Send deletion request

4. Disconnecting your Instagram account

If you are a Leadzap account holder and you want to stop Leadzap from accessing your Instagram messages but keep the rest of your account active, you can disconnect Instagram without a deletion request.

1. Log in to app.leadzap.co.in.
2. Navigate to Settings → Channels.
3. On the Instagram card, click Disconnect.

Disconnection immediately invalidates the Meta access token we hold for your Instagram account. We can no longer send or receive Direct Messages on that account through Leadzap.

You can additionally revoke Leadzap's access from within Instagram itself:

1. Open the Instagram app and go to your profile.
2. Tap Settings and activity → Apps and websites (path may vary by version).
3. Find Leadzap in the Active list and tap Remove.

You can also manage this via Facebook at facebook.com/settings?tab=business_tools.

5. Disconnecting your WhatsApp account

WhatsApp Business Cloud API connections are set up during Leadzap onboarding and managed centrally. To disconnect your WhatsApp Business number, contact us at saifuddin@almufaddal.com and we will revoke access within 24 hours.

6. What gets deleted

On a confirmed deletion request, we permanently remove the following from our production database:

• Your contact record (WhatsApp number, Instagram user ID, name, labels, custom fields)
• The full message history of your conversations (text, media URLs, message IDs, timestamps, status updates)
• Media files associated with your conversations (images, videos, voice notes, documents) stored in our object storage
• Webhook delivery logs and integration event payloads referencing your data
• For account holders: your Leadzap account, team membership, connected channel credentials, templates, campaigns, auto-reply rules, segmentation labels, and analytics records
• Stored OAuth access tokens for any channels you had connected

7. What we may retain

We may retain limited data after deletion where required by Indian law or for legitimate auditing purposes:

• Aggregated, non-identifiable analytics (e.g. message volume per month per region) that no longer reference you personally
• Transactional records required by tax law (e.g. invoice records for paid subscriptions, retained for the legal minimum period)
• Backup snapshots on a 30-day rotation cycle — data may persist briefly in backups until the next rotation overwrites it
• Records of your deletion request itself — proof that we honoured the request, retained for compliance audit

8. Timeline

• Acknowledgement: within 7 days of receiving your request.
• Verification: we may ask for additional information to confirm your identity or the records you want deleted.
• Completion: within 30 days of acknowledgement. We will email you a confirmation when deletion is complete.
• Backups: live data is deleted immediately on completion. Backup copies are overwritten within the following 30-day rotation cycle.

9. Contact us