User Data Deletion

ZenWapp respects your right to control your personal data. This page explains what data we hold, how to request its deletion, and the timeline you can expect. The process complies with Turkish Personal Data Protection Law No. 6698 (KVKK), the EU General Data Protection Regulation (GDPR), and Meta Platform requirements for connected applications.

Data We Process

• Account profile (name, email, phone)
• Connected channel accounts (WhatsApp Business, Messenger, Instagram, Email)
• Conversations and messages exchanged through the platform
• Contact lists synced from connected channels
• Subscription, billing, and payment records
• Session, login and device information for security

How to Request Deletion

To request deletion of your personal data, send an email to the address below from the email registered to your account. Include the following information so we can verify your identity:

• Subject: Data Deletion Request
• Full name registered on the account
• Email address registered on the account
• Optional: a brief reason (helps us improve)

We process deletion requests free of charge within 30 days of receipt, in line with KVKK Article 13 and GDPR Article 17. You will receive a written confirmation by email when the deletion is completed.

Automatic Deletion via Meta Platforms

If you connected your Facebook, Messenger, Instagram, or WhatsApp Business account to ZenWapp and you remove the ZenWapp app from your Meta account settings, Meta will notify us. We will then automatically:

• Revoke and delete the access tokens we hold for you
• Stop syncing conversations from those channels
• Remove the channel link from your ZenWapp account

Removing the app from Meta does NOT automatically delete your ZenWapp account or other channels (such as Email or web chat). For full account deletion, send an email request as described above.

Data Retained After Deletion

Some data must be retained for legal or regulatory purposes even after a deletion request:

• Invoice and tax records — retained for 10 years (Turkish Tax Procedure Law)
• Anti-fraud and security logs — retained for up to 1 year
• Anonymized aggregated statistics with no personally identifiable information

Data Controller