User Data Deletion Instructions

SaparAI is operated by:

For privacy and personal data matters, contact:

admin@saparai.com

Send a deletion request to admin@saparai.com with the subject Data Deletion Request. Use your account email where possible. You can request deletion even if you cannot sign in or do not have a SaparAI account.

Email is the currently supported request method. The request is reviewed by support; this page does not claim an automatic account-deletion button or instant deletion.

To help us identify the correct data and prevent unauthorized deletion, please provide:

• your SaparAI account email;
• your full name where necessary to identify the account;
• the name of the relevant organization or workspace, if applicable;
• the connected service concerned, such as Meta, Instagram, WhatsApp, TikTok, Google, or amoCRM, if applicable;
• a brief description of the data you want deleted.

Do not email us passwords, access tokens, payment card information, copies of identification documents, or other unnecessary sensitive information.

Because a deletion request may permanently affect access to data, SaparAI may verify that the person making the request is:

• the relevant data subject;
• the account holder;
• an authorized representative;
• or an authorized administrator of the relevant organization.

Where possible, verification will be performed using the existing SaparAI account, account email, authentication flow, or another proportionate method.

SaparAI will not request more personal information than reasonably necessary to verify the request.

If we cannot reasonably verify the identity or authority of the requester, we may ask for additional information before carrying out irreversible deletion.

If you request deletion of your personal SaparAI account, SaparAI will review personal data associated with that account and delete, anonymize, restrict, or otherwise cease processing such data where required by applicable law.

Depending on how you used SaparAI, this may include:

• account profile information;
• account preferences;
• authentication-related account records;
• personal workspace membership information;
• saved AI conversations associated specifically with your account;
• personal notifications;
• uploaded content associated exclusively with your account;
• personal integration information;
• personal platform identifiers;
• other personal data associated with your SaparAI user profile.

Deletion of an individual user account does not necessarily require deletion of an entire organization or workspace where the information belongs to a business customer or is required for continued use by other authorized workspace members.

Where appropriate, SaparAI may instead remove your access, membership, personal identifiers, or other information attributable specifically to you.

Deletion of an individual account and deletion of an entire SaparAI workspace are different actions.

An entire workspace may contain:

• campaigns;
• advertising history;
• business settings;
• CRM records;
• orders;
• customer information;
• analytics;
• creative materials;
• AI-generated materials;
• WhatsApp conversations;
• connected platforms;
• commercial records;
• content;
• audit information;
• data belonging to other workspace users.

A request to delete an entire organization or workspace must normally be made by a person authorized to act for that organization, such as the workspace owner or another duly authorized representative.

SaparAI may verify such authority before deleting organization-level information.

If you have used SaparAI in connection with Meta, Facebook, Instagram or another Meta service, you may request deletion of data SaparAI has stored in connection with that integration.

Depending on the permissions and functions used, this may include SaparAI-held copies or records relating to:

• Meta user identifiers;
• Meta business identifiers;
• Facebook Page identifiers;
• Instagram professional account identifiers;
• advertising account information;
• campaign information;
• ad set information;
• advertisement information;
• creative information;
• advertising statistics;
• Meta referral information;
• integration metadata;
• access credentials or tokens stored by SaparAI;
• other Meta-originated data stored by SaparAI.

Where deletion is required and no lawful retention basis applies, SaparAI will delete or otherwise cease processing the relevant information.

You may also revoke SaparAI's future access through the relevant Meta or Facebook account settings, including Business Integrations, Apps and Websites, or other applicable Meta settings.

Removing or revoking the SaparAI integration generally prevents future API access after the relevant authorization is revoked.

However:

revoking access is not necessarily the same as deleting data already stored by SaparAI.

If you also want previously stored SaparAI-held information deleted, submit a deletion request using the instructions on this page.

For data received from Meta, Facebook or Instagram, use the email request above and identify the connected account or Page. You may also revoke future access in the applicable Meta account settings.

These are data deletion instructions. They do not represent a deployed Meta deletion callback or a public request-status service. If Meta provides SaparAI with a valid deletion request through an available mechanism, the operator must handle it under the applicable platform rules and law.

A support reference, if provided, is used only to process the request and confirm its outcome. It is not used for marketing.

Where SaparAI has processed personal data through a WhatsApp Business integration, a deletion request may relate to:

• WhatsApp identifiers;
• telephone number information;
• profile information;
• messages;
• conversation metadata;
• message status information;
• referral information;
• advertising attribution information;
• CRM relationships;
• order relationships;
• other data stored by SaparAI in connection with the conversation.

Whether specific information can be deleted immediately may depend on the role of SaparAI and the relevant business customer.

You may interact with a company that uses SaparAI without personally having a SaparAI account.

For example, your information may have entered SaparAI because you:

• contacted a business through WhatsApp;
• submitted a form;
• placed an order;
• became a CRM lead;
• communicated with a company using SaparAI;
• or interacted with an advertising or attribution workflow.

In these situations, the business using SaparAI may determine the purpose for which your information is processed.

You may therefore submit your request directly to that business.

You may also contact SaparAI at:

admin@saparai.com

If we identify the relevant SaparAI customer, we may coordinate with that customer to determine the proper action while protecting the identity and data of all affected parties.

A SaparAI customer cannot require SaparAI to continue processing information where doing so would violate applicable law.

A verified deletion request may also concern personal information stored in SaparAI CRM or synchronized from a supported third-party CRM.

Such data may include:

• name;
• telephone number;
• email address;
• lead information;
• customer information;
• communication history;
• CRM identifiers;
• deal information;
• order relationships;
• marketing source information;
• other CRM-related personal data.

Where a third-party CRM independently stores the same information, deletion from SaparAI does not automatically delete the independent copy held by that CRM provider or by the customer.

Some information may form part of an order, transaction, payment, accounting, contractual, tax, fraud-prevention, or dispute record.

Where applicable law or an existing legal obligation requires SaparAI or its customer to retain such information, the information may not be deleted immediately.

In that situation, SaparAI will limit further processing to the legally permitted purpose where required.

Information retained solely because of a legal obligation must not be repurposed for unrelated marketing merely because it remains technically stored.

SaparAI may maintain information used to determine whether an order, lead, or customer interaction can be attributed to an advertisement, campaign, creative, referral, or tracked link.

Where such data identifies or can reasonably be linked to an individual, it will be treated in accordance with applicable personal data requirements.

Some attribution records may need to remain associated with legitimate transaction or audit records where an applicable legal basis exists.

Other attribution or analytics information may be deleted, anonymized, aggregated, or made no longer identifiable.

Some SaparAI analytics records may be anonymous by design or may be transformed so that they can no longer reasonably identify an individual.

Information that is genuinely anonymous and cannot reasonably be related back to a person is not treated in the same manner as identifiable personal data.

SaparAI will not intentionally claim that identifiable data is anonymous merely to avoid a valid deletion request.

Where a deletion request covers AI-related personal data stored by SaparAI, SaparAI may delete or anonymize relevant:

• AI conversation history;
• prompt history;
• generated outputs;
• uploaded files;
• stored AI context;
• analysis associated with the relevant account,

where deletion is required and technically applicable.

Some AI requests may have been processed by third-party technology providers.

Where required by law and applicable contractual arrangements, SaparAI will take appropriate steps regarding processors that received the relevant personal data.

SaparAI cannot delete information independently controlled by a third party where SaparAI does not have legal or technical authority to do so, but this does not relieve SaparAI of its own obligations concerning data under its control.

When an integration is permanently disconnected or an account is deleted, SaparAI will revoke, delete, expire, or otherwise render unusable stored access credentials where appropriate and technically possible.

This may include credentials associated with:

• Meta;
• Instagram;
• WhatsApp;
• TikTok;
• Google;
• amoCRM;
• other supported platforms.

Deletion of a SaparAI-held token does not delete the user's account on the external platform.

Subject to applicable retention requirements, deletion may include personal data contained in:

• uploaded documents;
• images;
• videos;
• audio;
• creative files;
• attachments;
• other user-supplied media.

Where the same file belongs to an organization or is lawfully shared with multiple authorized workspace users, deletion of one user's account may not require deletion of the underlying business file.

Personal information attributable specifically to the requesting user will be handled separately where appropriate.

Deleted information may remain temporarily in encrypted or otherwise protected backup systems until the applicable backup copy is overwritten or expires under the relevant retention cycle.

Backup copies are maintained for security and disaster recovery and are not intended to be used for ordinary business processing after the corresponding information has been deleted from the active system.

If a backup containing previously deleted information is restored, SaparAI will take reasonable measures to re-apply the deletion or restriction where required.

Certain limited security or audit information may need to be retained where reasonably necessary and legally permitted for:

• security;
• fraud prevention;
• investigation of unauthorized access;
• defense of legal claims;
• demonstration of compliance;
• enforcement of legal rights;
• compliance with binding legal obligations.

Any such retention must be limited to the relevant purpose.

A deletion request will not be rejected merely because some narrowly defined security record must lawfully remain.

SaparAI may be unable to delete particular information immediately where retention or continued processing is required by:

• the laws of the Republic of Kazakhstan;
• tax or accounting requirements;
• a binding court order;
• a valid request from a competent authority;
• an unperformed contractual obligation;
• fraud or security investigations;
• the establishment, exercise or defense of legal claims;
• another legal basis expressly permitted by applicable law.

Where only part of the requested information must be retained, SaparAI may delete the remainder.

Where appropriate, retained information will be restricted from ordinary processing.

Where processing is based on your consent, you may withdraw that consent in accordance with applicable law.

A withdrawal of consent does not retroactively make processing that was lawfully carried out before the withdrawal unlawful.

Where the request constitutes a withdrawal of consent under the laws of the Republic of Kazakhstan, SaparAI will cease the relevant processing within the period required by applicable law, unless continued storage or processing is required or permitted under another applicable legal basis.

Where required by Kazakhstan law, this period is currently up to 15 business days from receipt of a valid withdrawal request, or SaparAI will provide a reasoned response where processing cannot lawfully be stopped.

If it is established that personal data is inaccurate, unlawfully collected, unlawfully processed, or no longer lawfully required, SaparAI will take the corrective, blocking, deletion, destruction, or other action required by applicable law.

Some such cases may be subject to shorter statutory response requirements than an ordinary deletion request.

A request may be refused or only partially fulfilled where deletion would conflict with applicable law or another valid legal basis.

Examples may include:

• a legal retention requirement;
• an unperformed contractual obligation;
• a legitimate need to establish, exercise or defend an existing legal claim where permitted by law;
• a valid security or fraud investigation;
• inability to verify the requester;
• lack of authority to delete another organization's data;
• another circumstance expressly permitted or required by law.

Where required, SaparAI will provide a reasoned explanation rather than silently ignoring the request.

SaparAI processes valid deletion and withdrawal requests within the period required by applicable law.

Different legal grounds may require different response periods.

Where a request constitutes withdrawal of consent under applicable Kazakhstan personal data law, the relevant processing must generally be ceased within 15 business days, unless continued storage or processing is required or permitted by law, in which case SaparAI may provide a reasoned refusal or limitation.

SaparAI may complete straightforward requests sooner.

The consent-withdrawal period is described in Article 8 of the Kazakhstan Law On Personal Data and Their Protection. Other requests may follow different legal periods.

After completing a verified deletion request, SaparAI may notify the requester that the request has been completed.

The confirmation may include a request reference number.

For security reasons, confirmation does not need to disclose confidential internal information, information relating to another person, security credentials, database architecture, or information that would create a security risk.

Deleting a SaparAI account or personal data is separate from management of advertising campaigns stored on external advertising platforms.

If you have active advertising campaigns on:

• Meta;
• Facebook;
• Instagram;
• TikTok;
• Google;
• or another advertising platform,

you should independently verify the status of those campaigns in the official advertising platform.

Do not assume that submitting a personal data deletion request automatically pauses, deletes or cancels an active advertising campaign or advertising spend.

If necessary, stop the campaign directly through the relevant advertising platform.

Deleting SaparAI data does not necessarily:

• delete your Meta account;
• delete your Facebook Page;
• delete your Instagram account;
• delete your WhatsApp Business Account;
• delete your TikTok account;
• delete your Google account;
• delete your amoCRM account;
• cancel subscriptions with third parties;
• remove advertising objects stored independently by those platforms;
• cancel payment obligations owed directly to those providers.

Those relationships are governed separately by the relevant third-party service.

A data deletion request and cancellation of a paid SaparAI subscription are related but legally and technically distinct processes.

If applicable, users should also cancel future subscription renewal using the available account or billing controls.

Deletion does not eliminate payment obligations that lawfully arose before the deletion request.

SaparAI will not use a valid privacy or deletion request as a reason to unlawfully discriminate against a data subject.

However, deletion of information that is technically necessary to provide SaparAI may make it impossible to continue providing some or all functions of the Service.

To submit a deletion request or ask a question regarding personal data:

Recommended email subject: Data Deletion Request.