Data Deletion Instructions

Overview

You can delete personal data held by Wylz at any time. The path depends on what role you have:

• Workspace owner / admin — close the workspace from the dashboard or by email.
• Team member — remove yourself from a workspace, or delete your user account.
• End User (someone who messaged a business on WhatsApp through our platform) — contact that business directly; they control that conversation.

1. Workspace owners — close the workspace

Closing a workspace deletes all of its data: contacts, conversations, templates, broadcasts, chatbots, team-member roles within that workspace, and analytics records.

Option A — from the dashboard

1. Sign in to whats.wylz.dev with an owner account.
2. Go to Settings → General.
3. Scroll to the bottom and click "Close workspace".
4. Confirm the workspace slug to authorise the deletion.

Option B — by email

Send a request from the email address registered as a workspace owner to privacy@wylz.dev with the subject line "Delete workspace" and include the workspace slug. We will confirm within 5 business days and complete deletion within 30 days.

2. Team members — leave or delete your account

Leave a workspace

From the dashboard, go to Settings → Profile and click "Leave workspace". Your user record stays — you can still be invited to another workspace later — but your role assignment in this workspace and any audit entries attributable to you are anonymised within 30 days (subject to legal retention requirements).

Delete your user account

From Settings → Profile, click "Delete my account". This removes you from every workspace you belong to, deletes your name, email, password hash, TOTP secret, login history, and personal preferences. Audit log entries that mention you are retained in pseudonymised form for the audit retention window (1 year) because they are required to maintain accountability within the workspace.

3. End Users — you messaged a business through WhatsApp

If you sent a WhatsApp message to a business that uses Wylz and you want your messages, contact record, or any other personal data removed:

1. Contact the business directly — they are the data controller of your conversation with them. You can reply on WhatsApp asking them to delete your data, or use any contact channel they offer.
2. If the business does not respond or you cannot reach them, email privacy@wylz.dev. Include the business's name or WhatsApp number and a short description of the data you want removed. We will forward the request to the relevant workspace owner and help them act on it.

Wylz cannot delete a conversation directly without the workspace owner's authorisation, except where required by law. We will treat verifiable End User deletion requests as legal obligations on the controller and require the workspace owner to act within statutory timelines.

4. What we keep after deletion (and why)

• Invoices & payment records — retained for 5 years to comply with Egyptian income-tax record-keeping rules that apply to the Operator. These contain workspace name, billing address, and amounts, but no conversation content.
• Audit log — pseudonymised entries kept for 1 year for security accountability.
• Backups — encrypted database backups are rotated on a 30-day cycle; deleted data fully ages out of backups within 30 days of the deletion request.
• Aggregated analytics — non-identifying aggregate metrics (e.g. total messages sent per region per day) may be retained indefinitely.

Everything else — workspace settings, team members, contacts, conversations, templates, broadcasts, chatbots, wallet balance, credit ledger — is irreversibly deleted.

5. Timelines

• Acknowledgement: within 2 business days.
• Verification of identity: 1–5 business days (we may ask you to confirm from the registered email address).
• Active-store deletion: within 30 days of verification.
• Backup expiry: within 60 days from the deletion date (encrypted backups age out automatically).

6. Contact for deletion requests

• Email: privacy@wylz.dev
• Subject: "Data deletion request"
• Include: the email address of your Wylz account, the workspace name/slug (if applicable), and a short description of what you want deleted.

We respond to every verifiable request within 30 days, as required by the Egypt Personal Data Protection Law 151/2020 (and GDPR for EEA residents).