Data Deletion Instructions

1. Deletion Requests and Applicable Rights

You may ask HararAI to delete personal data we hold about you. This includes data collected directly through our platform (hararai.com) as well as data obtained from third-party integrations you authorized — Facebook, Instagram, WhatsApp, Google (including Google Business Profile, Google Ads, Google Analytics, Google Calendar), LinkedIn, Twilio, Stripe, QuickBooks, and any other service you connected via OAuth.

We assess each request under the laws that apply to you and to the data. In Australia, the Privacy Act may require information to be destroyed or de-identified when it is no longer needed, subject to legal retention requirements and other exceptions. Rights may also apply under the EU/UK GDPR, the CCPA/CPRA, or other local laws. HararAI also follows the Meta Platform Terms, which require that users can request deletion of data obtained through Facebook, Instagram, and WhatsApp integrations.

2. How to Request Deletion

Account and data-deletion requests are handled by our privacy team so we can verify the requester and preserve only records that we are legally required to retain.

Account and Data Deletion

Send an email to privacy@hararai.com with the subject line "Data Deletion Request". Include:

• The email address associated with your HararAI account
• If applicable, the specific platform and account ID you want deleted (e.g., "Facebook user ID 123456", "Instagram Business account @mybiz")
• Confirmation that you are the account owner

We verify the request before taking action and send a confirmation when processing is complete, including an explanation of any records we must retain by law.

Revoke Third-Party Access Only

If you only want to disconnect a specific third-party integration (e.g., Facebook) without deleting your HararAI account:

Facebook / Instagram / WhatsApp:

1. Go to Facebook Business Integrations
2. Find HararAI in the list
3. Click Remove and confirm

Google:

1. Go to Google Account → Third-party access
2. Find HararAI and click Remove Access

LinkedIn:

1. Go to LinkedIn Permitted Services
2. Find HararAI and remove it

In-App Revoke:

You can also disconnect any integration from the HararAI dashboard at Settings → Integrations. Click the integration and choose "Disconnect."

Revoking third-party access prevents new access once the provider processes the revocation. Previously imported data is handled under your deletion request, our retention obligations, and the terms described below.

3. What Gets Deleted

When you request account deletion, we remove:

• Your user profile, password hash, and authentication sessions
• All business data in your workspace: contacts, leads, appointments, pipelines, tasks, notes, and CRM records
• Conversations: emails, SMS, social DMs, WhatsApp messages, and live chat transcripts
• Voice data: call recordings, AI transcripts, and call logs
• Social media data: cached Facebook Pages, Instagram Business accounts, LinkedIn Company Pages, scheduled posts, drafts
• Advertising data: Meta ad account metadata, Google Ads campaign data, captured Lead Ads submissions
• OAuth tokens, refresh tokens, and access credentials for every connected integration
• Uploaded files, images, and documents
• Usage logs, audit trails, and activity history that contain personally identifiable information
• Workspace-specific AI fine-tuning data and knowledge base content
• Any other content or data that can be associated with you or your workspace

4. Data We May Retain

We retain a minimum data set required by law or for legitimate operational reasons:

• Invoices, receipts, and payment records — retained for 7 years to comply with the Australian Taxation Office and equivalent tax authorities
• Anonymized, aggregated analytics that cannot identify you
• Records required for legal disputes, regulatory compliance, or law-enforcement requests
• Data in encrypted backups until it is overwritten through our normal backup-rotation process; it is not restored for ordinary business use after an approved deletion

These retained records are stored under strict access controls and are used only for the purposes listed above.

5. Timelines and Confirmation

• Acknowledgement: we aim to respond within 2 business days of receiving your request
• Verification: we may ask you to confirm identity to protect against unauthorized deletion requests
• Deletion completed: we aim to complete verified requests within 30 days, subject to applicable law, complexity, and lawful retention requirements
• Confirmation email: sent to your registered address once deletion is complete

6. Cascading Effects

Deleting your HararAI account will also affect services that depend on it:

• AI phone agent will stop answering your business number; forwarded calls will revert to your carrier's default behaviour
• Scheduled social media posts and ad campaigns will be cancelled
• Automation workflows will stop executing
• We will explain any subscription-cancellation or billing steps required to finish closing the workspace
• Team members in your workspace will lose access

If you want to preserve any data before deletion (e.g., export contacts, download invoices), do so before submitting the request, or ask us to include an export in our response.

7. Questions or Concerns

If you have questions about deleting your data, need help locating a specific integration to disconnect, or believe your data has not been properly deleted, contact our Data Protection Officer at privacy@hararai.com.

You also have the right to lodge a complaint with a supervisory authority. In Australia, that is the Office of the Australian Information Commissioner (oaic.gov.au). In the EU/UK, your local Data Protection Authority.