Your right to delete
You can ask us to delete your ComDove account and the personal data we hold about you at any time. There's no charge, no exit interview, and no clever attempt to talk you out of it. This page explains exactly how to make the request and what happens next.
How to request deletion
There are two ways to start a deletion request:
- Self-serve from the app. Sign in, go to Settings → Account → Delete account, and confirm. You'll receive a confirmation email within a few minutes.
- Email us. Write to privacy@comdove.com from the email address registered on your account. Subject line: Delete my account. Include your workspace name so we can locate it.
If you signed up through a Meta WhatsApp Business integration and can no longer access the original email, email us anyway — we'll verify ownership another way (see section 06).
What gets deleted
Once verified, we permanently remove the following from our production systems:
- Your user profile — name, email, phone, password hash, team memberships.
- Your workspace data — uploaded contacts, message history, templates, labels, internal notes, and tags.
- Saved campaign and automation configurations.
- Stored payment method tokens (the card itself is held by Razorpay, not us).
- Support conversation history and attachments.
What we may retain (and why)
A small set of records is kept for legal and operational reasons, even after deletion:
- GST invoices and payment records — retained for up to 8 years as required by Indian tax law.
- Anti-fraud signals — minimal hashed identifiers used to prevent sanctioned actors from re-signing up.
- Aggregated, anonymised metrics— counts and percentages that no longer identify you (e.g., “customers in Pune”).
Nothing in this retained set can be used to re-contact you or your customers.
Timeline
Here's what happens after we receive a verified request:
- Day 0 — request received; we send a confirmation email with a reference number.
- Immediately — your account and customer data are deleted from our production databases. The account is no longer reachable from the dashboard, the API, or any connected WhatsApp number.
- Within 7 days — your data is fully eradicated from our backup snapshots. We take encrypted database snapshots every two hours and retain each snapshot for seven days on a rolling basis; once the snapshot containing your data ages past seven days, it is automatically deleted.
- Day 7 — we email a final confirmation that deletion is complete.
Verification
To protect against fraudulent deletion requests, we verify that the request actually comes from you. Usually a click-confirm email is enough. If we have reason to doubt — for example the request comes from a different email address than the one on file — we may ask for additional proof, such as the last four digits of the registered phone number, the workspace ID, or a verification message from your WhatsApp Business number.
Third-party services
Some data leaves our systems and is held by sub-processors. Deletion from those services works as follows:
- Meta (WhatsApp Business Platform)— messages routed through Meta are subject to Meta's own retention policy. We disconnect your phone number on our side. You can request deletion directly from Meta via your WhatsApp Business Manager.
- Razorpay — payment records are retained by Razorpay under RBI regulations. We pass on a deletion request but final control rests with Razorpay.
- AWS — our cloud host. Once we delete from our databases, the corresponding AWS backup snapshots are rotated out and purged within 7 days.
After deletion
Your account cannot be restored once deletion is complete — the data is genuinely gone, not soft-flagged. If you want to use ComDove again later, you'll sign up as a new customer with a fresh workspace. Any active subscription is cancelled and pro-rata refunds (if applicable under our Terms) are issued to your original payment method.