Data Deletion

1. Disconnect Meta or WhatsApp

1. Sign in to the relevant PerfectCRM workspace.
2. Open Settings → Meta or Settings → WhatsApp.
3. Disconnect the integration or reconnect with a different authorised account.
4. You may also remove PerfectCRM from Facebook/Meta Business Integrations.

2. Submit a deletion request

Email privacy@perfectcrm.io from your registered email address with the subject “PerfectCRM data deletion request”. Include:

• your account email and workspace name;
• whether you request account, workspace, integration or specific-record deletion;
• relevant non-secret identifiers, such as workspace name, lead external ID or Meta user/business ID if known;
• your relationship to the data and any information needed to verify authority.

Never send passwords, OTPs, access tokens, card details or unnecessary identity documents by email.

3. Requests from leads or customers

If a business collected your data through its PerfectCRM workspace, contact that business first because it controls the record and decides the lawful retention period. You may also contact us; we will identify and coordinate with the relevant workspace where legally appropriate.

4. Verification and response

We verify identity, workspace authority and request scope before deletion to protect against fraudulent requests. We acknowledge valid requests and normally complete eligible deletion within 30 days, or provide an update when applicable law, complexity or coordination requires more time.

5. What deletion covers

After approval, eligible information is deleted or irreversibly anonymised from active systems. Disconnecting Meta or WhatsApp stops future authorised synchronisation. A deletion request may also cover stored platform identifiers, tokens, messages, leads and imported performance data associated with the verified account and requested scope.

6. Data we may retain

We may retain limited invoice, transaction, audit, security, fraud-prevention, legal-hold or dispute records where required by law or legitimate compliance needs. These records remain access restricted and are not used for marketing. Deleted information may persist temporarily in protected backups until those backups expire under normal rotation.