Data Deletion Instructions

How to ask us to delete data we hold about you, what we remove, and how long it takes.

Last updated 4 October 2026

Ask here

Two steps, and the second one is the important one. You tell us the number, and then you send one WhatsApp message from it — that message is how we know the number is yours. We will not message you to check: being asked to prove yourself by somebody you just asked to forget you is the wrong way round, so the proof travels in the other direction.

With the country code — WhatsApp numbers are global and we cannot guess yours.

Optional. It helps us find the right workspace faster.

Submitting this does not delete anything yet. It records the request and tells you the one step that proves the number is yours.

Check on a request

If you have a reference already, this tells you where it has got to. It does not show your number or the business's name, so the reference is safe to reuse.

Who to ask, and why it depends

Digiboffins provides a platform that businesses use to manage their own WhatsApp conversations. That means there are two different situations, and the right route differs:

  • You messaged a business on WhatsApp. That business decides what to collect and keep; we only store and process it on their behalf. The form above reaches them. You can also just send "DELETE MY DATA" to them on WhatsApp without using this page at all — the automation stops talking to you, the request is recorded, and you get a reference back.
  • You have an account with us. You or a workspace administrator can delete the account and its workspace data from Settings, without asking anyone.

If you no longer have the number

The WhatsApp step cannot work if the phone or the SIM is gone, and that is a real gap rather than an edge case. Email info@signalaiso.com with the subject "Data deletion request" and tell us the number, the business if you know it, and anything that connects you to it. We will verify by other means, which is slower and more intrusive — so use the form above if you still can.

What we delete

  • Contact record — phone number, WhatsApp profile name, and any attributes, tags or notes the business stored against you.
  • Conversations and messages — message content, delivery and read status, and attachments held on our systems.
  • Form answers — anything you filled in on a form the business sent you.
  • Internal notes about you — reminders and alerts the business's staff raised against your conversation, which usually carry your name.
  • Account data, where the request is for a platform account — user record, workspace membership, and session credentials.

These are removed, not hidden. A record marked deleted but still present is not deletion, whatever the business's screen then shows them.

What we keep, and why

We are honest about this rather than claiming a clean sweep:

  • The record that you asked — the reference, the dates, and a count of what was removed. Without it there is no evidence the deletion happened, which is the first thing anyone checking would ask for. Your number is taken out of that record once the deletion is done, so it is not a list of people who asked to be forgotten.
  • Anonymous counts — if you tapped a link in a message, the business keeps the fact that somebody did. It is no longer connected to you, and cannot be.
  • Audit and billing records — we retain the fact that an action or a payment occurred, and when, because we are required to. These are minimised so they do not contain message content.
  • Backups — deletion applies to our live systems immediately. Encrypted backups roll off on their own schedule, currently within 7 days, after which the data is gone from those too. We do not restore deleted data from a backup.
  • Your copy on WhatsApp — messages in your own WhatsApp app are held by you and by Meta, not by us. Deleting data here does not remove them from your phone.

How long it takes

We complete confirmed requests within 30 days, and usually much sooner. The business is shown the request with the oldest one first, because the thirty days is a legal limit and not a target.

If you are unhappy with the outcome

Email us with your reference and ask for it to be escalated. A refused request comes with a reason; if you disagree with it, say so. If you are in a jurisdiction with a data protection authority, you also have the right to complain to them — in India that is under the Digital Personal Data Protection Act, and in the EU and UK under the GDPR.

Related: our Privacy Policy explains what we collect and why, and our Terms of Service cover the platform agreement.