User Data Deletion

Overview

This page explains how to ask Avenoxa to delete your account and the data held in it, exactly what that deletion removes, what we are required to keep, and how long the process takes.

Avenoxa is a business tool. An account belongs to a business, and the business's data — its contacts, conversations, templates, campaigns and team logins — is deleted together, as one account. Deleting an account therefore deletes the data of every team member who used it, so the request must come from the person who owns the account.

Who can request deletion

• The account owner — the person in whose name the Avenoxa subscription is held — may request deletion of the whole account.
• A team member may ask the account owner to remove their individual login; owners can delete team members themselves from inside the app.
• A customer of one of our clients — someone who messaged a business on WhatsApp — should contact that business directly. Their contact record belongs to that business, not to Avenoxa, and only they can delete it. We will pass a request on if you write to us, but we do not delete a client's records without their instruction.

How to request deletion

Avenoxa does not currently expose a self-service "delete my account" button inside the app. Every account deletion is carried out by our team, on request, so that it can be verified before anything is closed. To request it:

• Email support@avenoxa.in from the email address registered on the account, with the subject Data deletion request.
• Include your business name and your registered WhatsApp number so we can identify the account.
• Tell us whether you want the entire account deleted or only specific records.
• You may also reach us on WhatsApp at +91 7990639897, but we will still confirm the request by email before acting on it.

We verify that the request comes from the account owner before doing anything. If we cannot verify it, we will ask you for confirmation rather than proceed — deletion cannot be undone once the retention window below has passed.

What happens, and when

Account deletion runs in two stages, and the gap between them is deliberate.

Stage 1 — the account is closed (immediately)

As soon as we action the request, the account is closed: everyone signed in is signed out, logins stop working, and automation, campaigns and reminders stop running. Nothing is erased at this point. If you change your mind, tell us within 30 days and we restore the account's contacts, conversations, flows and files.

A restore cannot bring back what happened while the account was closed: reminders and follow-ups that fell due in that time are not sent afterwards, WhatsApp messages sent to the business in that time may not have reached the app, and campaigns that were scheduled for that time are sent once the account is restored.

Stage 2 — permanent deletion (after 30 days)

Once 30 days have passed, our team permanently deletes the account's business data from our database and its files from our storage. This stage is irreversible: after it runs, the data cannot be recovered by us, by you, or from within the application.

If any part of a deletion fails, it is retried, and the account is not recorded as deleted until every part has completed.

What data is deleted

Permanent deletion removes the following from your account:

• Team logins — every user account, its roles and its permissions.
• Contacts — customer records, notes, tags, assignments and journey history.
• Conversations and messages — chat threads, message logs, delivery and read receipts, assignment and conversation state.
• Campaigns — broadcasts and their recipient lists.
• Automation — flows, flow steps, saved automation templates and quick replies.
• WhatsApp configuration — message templates, template import history, and the channel connection itself including the stored access credentials for your WhatsApp Business account.
• Media library — uploaded images, documents, audio and video.
• Imports and exports — import records, their failed-row records and generated export files.
• Reminders and notifications — scheduled reminders, in-app notifications and browser push subscriptions.
• Onboarding records — your setup checklist and its progress, and WhatsApp connection and history-sync records.
• Company profile — business name, contact email, phone number, industry, business hours, holidays and after-hours message. Your public business profile page is taken offline.

What is retained, and why

A small set of records outlives the account. They are kept because we are required to keep them, or because deleting them would destroy the only record of a commercial relationship — which is precisely what a tax authority, a payment dispute or a security review asks for, sometimes years later:

• Invoices, payments, subscription records and billing credits — retained for tax, accounting and dispute-resolution purposes as required by law.
• Account history — the record that the account existed, was suspended or was deleted, and when.
• Audit log — an internal record of significant administrative actions, kept for up to 730 days and then deleted automatically.
• Billing identity and public-profile text — the GSTIN, PAN, billing address and bank details entered for the account, and the description, address and web address of its public business profile, are currently kept with the account record.

Your business name, contact email, phone number and industry are removed from the account record. What remains is a financial and administrative history. It is not fully anonymised: the billing identity and public-profile text listed above stay with it.

Deleting individual records yourself

You do not need to close your account to delete data. Inside the app, users with the relevant permission can delete records directly, and those deletions are enforced on the same schedule:

• Contacts — deleting a contact hides it immediately and it can be restored for 30 days; if it is restored, its messages and attachments come back with it. After that it and its entire conversation history, message log, notes and journey events are permanently removed. The files attached to those messages are currently kept on our storage. Copies held by WhatsApp and on the phones of the people in the conversation are not affected (see Third-party services below). If that person messages the business again before the 30 days are up, the contact is restored automatically.
• Media — deleting a file from the Media Library removes it from storage immediately and frees the space. This cannot be undone.
• Exports — generated export files are deleted automatically 7 days after they are created.
• Imports — uploaded import files and the records of rows that failed to import are deleted automatically after 30 days.
• Enquiries — messages sent through the contact form on this website are kept so that we can reply and follow up; they are not deleted automatically yet. Ask us and we delete yours.

Subscription and billing

You do not have to cancel your subscription before requesting deletion — tell us, and we close the account and stop future billing together. Deleting an account does not by itself entitle you to a refund of fees already paid; what is and is not refundable is set out in our Refund Policy.

If you want a copy of your data before it is deleted, export your contacts from the app first, or ask us when you make the request. We cannot produce an export after permanent deletion has run.

Third-party services

Avenoxa is not the only place your data exists. Deleting your Avenoxa account does not delete data held by these services, and you may need to contact them separately:

• WhatsApp Business Platform (Meta). Messages sent and received through Avenoxa are transmitted and processed by Meta, and copies remain on Meta's systems and on the phones of everyone in the conversation. Your WhatsApp Business Account belongs to you, not to us — deleting your Avenoxa account disconnects it and destroys the access credentials we hold, but the WhatsApp Business Account itself, and the data Meta holds for it, continue to exist and are governed by Meta's own terms and privacy policy. Manage or delete those through Meta Business Manager.
• Razorpay. Subscription payments are processed by Razorpay. Card details are entered on Razorpay and never reach us. We keep Razorpay's record of each payment — its amount, status and the payment details Razorpay returns to us — with your invoices, and Razorpay retains transaction records under its own policies and India's financial regulations.
• Email delivery. Emails we have already sent you — login codes and other account emails — sit in your mailbox and in our email provider's delivery logs, and are not removed by account deletion.
• Cloud infrastructure. Our database and uploaded files are hosted on cloud infrastructure. Deletion is carried out there; see the backups section below for the one exception.

Backups

A deleted account may still be present in a backup of our systems taken before the deletion, until that backup expires on the backup system's own cycle. Backups are used only for disaster recovery and are never used to restore an account that asked to be deleted.

Contact

To make a deletion request, or to ask anything about this page:

Email: support@avenoxa.in
WhatsApp: +91 7990639897
You can also use the contact form.

Related: Privacy Policy · Terms & Conditions · Refund Policy