Data Deletion

Last updated: October 2026

This page explains how to request deletion of personal data that Aletheia processes through its WhatsApp Business messaging integration, and what we delete and keep when you do. It covers data handled on the WhatsApp Business Platform (operated by Meta) as part of our service, alongside the broader rights described in our Privacy Policy. To delete an Aletheia account and everything stored with it, see Delete Your Account.

Our Role: Who Controls the Data

When a business uses Aletheia to message its customers on WhatsApp, that business is the controller of its customers’ data and Aletheia acts as its processor — we handle the data on the business’s behalf and under its instructions. Because of this:

• If you messaged a business that uses Aletheia and want your data deleted, you can ask us using the steps below. We will act on your request and notify the business so its own records are updated. You may also contact that business directly.
• If you are a business (tenant) using Aletheia, you can request deletion of your own data, of a specific end-customer’s data, or of all data when you close your account.

How to Request Deletion

Email privacy@getaletheia.ai with the words “WhatsApp Data Deletion” in the subject line, and include the WhatsApp phone number the request concerns, in full international format (for example, +1 650 555 0123). Tenants can also request deletion through their account manager.

We verify the request first — for an end-customer, that you control the number; for a tenant, that the request comes from an authorized account user. Once verified, we complete the deletion and confirm it to you. If you cannot write from the number or account on file, contact us anyway and we will find another way to confirm it is you.

Timeframe

We complete verified deletion requests within 30 days. Data held in encrypted backups is removed as those backups age out of rotation, within 90 days. This meets the “without undue delay” standard under the GDPR and the response window under the CCPA.

What Gets Deleted

For the WhatsApp number or account in the request:

• The WhatsApp phone number and profile display name
• Message content — text and media (images, documents, audio, video)
• Message metadata — message identifiers, timestamps, and delivery and read status
• Opt-in and opt-out records and conversation state tied to that number
• For a tenant closing its account: its business profile, WhatsApp Business Account configuration, and the end-customer data described above

Deletion reaches our production databases, media and file storage, caches and search indexes, and the sub-processors that support the service (cloud hosting and messaging infrastructure, including Meta’s WhatsApp Business Platform), which are instructed to delete the data in turn.

Data Minimization

We retain WhatsApp message content only as long as it is needed to provide the service to the business, and no longer than necessary — consistent with Meta’s Platform Terms and the WhatsApp Business Solution Terms. A business may configure a shorter retention period for its own messages. When a business closes its account, its data is purged within 90 days unless we are legally required to keep specific records.

What We Keep, and Why

A few things outlive a deletion request, and only for as long as they need to:

• Records we are required to keep by law — for example tax and accounting records of payments. These are kept for the period the law requires, then deleted.
• Opt-out / do-not-contact records. If someone asked never to be messaged again, we keep that phone number on a suppression list so the opt-out can be honored. Deleting it would defeat its purpose; it is used for nothing else.

Questions

• Privacy and deletion: privacy@getaletheia.ai
• Support: hello@getaletheia.ai
• Aletheia is operated by TBG Sourcing Inc., 809 Cuesta Dr, PMB 5016, Ste B, Mountain View, CA 94040