Data Deletion

This English version is provided for convenience. The Spanish original (Eliminación de Datos) is the legally binding text and prevails in the event of any discrepancy.

1. How to request deletion

You can request deletion of your data by sending an email to contacto@miaia.ai with the subject line "Data deletion" and stating:

• The name and the contact detail you signed up with (email, phone or WhatsApp number).
• If you are a client of the platform, the name of the account or the business.
• If you are an end user, the name of the business you had the conversation with.

To protect your information, we may ask you to verify your identity before carrying out the request. Exercising this right is free of charge.

If you are an end user who wrote on WhatsApp to a business that uses our platform, please note that the controller of that data is that business, not miaIA.AI. You can contact the business directly or write to us: we will forward your request to the controller and confirm to you that we have done so.

2. What data is deleted

Once the request has been handled, the following is deleted from our systems:

• The contact details provided through the website form or messaging channels: name, email, phone, company and the content of your enquiry.
• The conversation history linked to your number or your account, including message content and conversation metadata.
• The account and profile identifiers linked to the WhatsApp Business integration.
• The records and automations linked to your record in the CRM tools we use for sales management.

Deletion also extends to backup copies, as set out in the following section.

3. Timeframe

We acknowledge receipt of the request within a maximum of 72 hours and carry it out within a maximum of 30 calendar days of receiving it, in accordance with Article 12 of the GDPR. If the request is particularly complex, this period may be extended by two further months, in which case we will inform you, giving our reasons, within the first month.

That timeframe refers to deletion from active systems. In backup copies, data is deleted in the normal rotation cycle of those copies, within a maximum of 90 calendar days from the request. While it remains in a backup, the data is encrypted, not actively used and available solely to restore the service after an incident: it is not used for any other purpose or reintroduced into active systems, unless a backup has to be restored, in which case the deletion is applied again immediately.

Once deletion is complete, we will send you written confirmation.

4. What is kept because the law requires it

Certain information cannot be deleted immediately because current legislation requires it to be kept. In that case the data is blocked: it is withdrawn from ordinary use and remains available only to judges, courts, the Public Prosecutor's Office or the competent authorities for the applicable limitation periods. Specifically:

• Billing data and accounting records: four years, under Spain's General Tax Law; and six years for commercial books and records, under the Spanish Commercial Code.
• Contractual data: for as long as claims arising from the contract may be brought, in line with the limitation periods of the Spanish Civil Code.
• Proof of consent: while the processing is active and for the period during which liability may arise, in line with the GDPR accountability principle.

Once those periods have ended, the data is permanently erased.

5. Deletion of WhatsApp data when an account is disconnected

When a business client disconnects its WhatsApp Business account from our platform, or its contract ends, the following procedure applies:

• The platform's access to the account ends immediately: we stop receiving messages and can no longer send messages on the client's behalf.
• The data linked to that account (conversations, contacts, metadata and identifiers) is deleted from active systems within a maximum of 30 days of disconnection, and from backup copies in the normal rotation cycle, within a maximum of 90 days, as set out in section 3.
• During that period the client can request an export of its data or ask for earlier deletion, which we will carry out without delay.
• Data subject to the legal retention obligations described in the previous section is excluded.

Any data that Meta keeps on its own infrastructure is governed by Meta Platforms' policies and is outside miaIA.AI's control. To request its deletion, you must contact Meta through the channels it provides in your WhatsApp Business account settings.

6. Right to lodge a complaint

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), C/ Jorge Juan 6, 28001 Madrid, Spain, or through its online office at www.aepd.es.

See also our Privacy Policy →