User Data Deletion

1. How to request deletion

To request data deletion, send an email from the registered address or from an address we can verify. If you no longer have access to the original email, we may request additional information to confirm your identity before processing the request.

• Provide your full name and the email associated with Astroz or with the public storefront.
• Include your phone/WhatsApp number, store or company name, and, if available, the store link where your data was provided.
• Explain which data you want deleted: admin account, store customer profile, orders, messages, attachments, WhatsApp data, or all applicable personal data.
• If the request involves a company, provide your relationship to it so we can verify authorization.

2. Response timeframe

We will confirm receipt of the request and respond within 15 days, unless applicable law requires or allows a different timeframe. In some cases, we may request additional information to confirm identity, scope, or authority to make the request.

3. What may be deleted or anonymized

• Account data, such as name, email, phone/WhatsApp number, avatar, documents, and profile data.
• Public storefront customer data, such as name, email, phone/WhatsApp number, address, account history, and associated preferences.
• Messages, comments, attachments, and conversation metadata stored by Astroz when deletion is applicable.
• Operational data that directly identifies a person, provided deletion does not conflict with legal, tax, security, fraud prevention, or third-party rights obligations.

4. Data that may need to be retained

Some data may be retained for legal, tax, regulatory, security, fraud prevention, audit, dispute resolution, or regular exercise of rights purposes. Where possible, this data will be limited, blocked, anonymized, or kept only for the required period.

Backups, technical logs, and security records may take up to 90 days to expire from retention environments, unless preservation for a longer period is required or permitted by law.

5. Astroz admin accounts

Authenticated users may request deletion of their own account. Before final removal, we may require transfer or closure of teams, stores, operational data, or responsibilities linked to the account.

Account deletion may remove access to the panel, store, operational history, and integrations. Data required for legal obligations or protection against abuse may be retained as described above.

6. Customers of stores that use Astroz

If your data was provided to a public storefront created by a merchant using Astroz, we may also need to consult or involve the responsible store, especially when the request affects orders, deliveries, tax obligations, or a commercial relationship.

7. WhatsApp and Meta-related data

When a store uses the WhatsApp Business Platform integration, Astroz may store messages, WhatsApp numbers, names, attachments, timestamps, identifiers, and conversation metadata to display history and operate support.

Upon receiving a valid request, we will delete or anonymize applicable data maintained in Astroz. Data maintained directly by Meta, WhatsApp, or the recipient's WhatsApp application must be requested through the channels and controls offered by Meta/WhatsApp.

8. Completion confirmation

After completing the applicable deletion, anonymization, or restriction, we will send confirmation to the email used in the request, except where this is not possible due to security, technical impossibility, or legal requirements.