User Data Deletion Instructions

Workspace Owners and Admins can delete connected Meta channels, customer contacts, or an entire workspace directly inside ZoriChat:

1. Disconnect a Facebook, Instagram, or WhatsApp Channel: Navigate to Dashboard → Channels, click Disconnect on the target channel, and confirm. The encrypted access token is erased immediately and an AuditLog entry is recorded.
2. Delete a Specific Customer Contact & Thread: Open Dashboard → Contacts, select the customer record, and choose Delete Contact Data to remove their messages, media attachments, and personal order fields.
3. Delete an Entire Workspace: Navigate to Dashboard → Settings → General → Danger Zone and confirm workspace deletion. All associated channels, contacts, conversations, messages, products, and orders cascade-delete permanently.

You can also revoke ZoriChat's access directly from Facebook:

1. Go to your Facebook Profile Settings & Privacy → Settings → Apps and Websites (or Business Integrations).
2. Locate ZoriChat and click Remove.
3. Click Send Data Deletion Request. Meta automatically invokes our signed callback endpoint (/api/meta/data-deletion) and provides a confirmation code.

If you are a customer who messaged a merchant via Facebook Messenger, Instagram DM, WhatsApp, or a ZoriChat Website Live Chat widget and want your conversation history, phone number, and delivery address deleted:

1. Send an email to privacy@zorichat.com with the subject line Data Deletion Request.
2. Include the phone number (`+880...`), Facebook/Instagram profile name, or email address used in the conversation, along with the merchant Page name.

Automated in-app deletions take effect immediately. Verified email deletion requests and Meta Data Deletion callback requests are completed within 7 calendar days (and no later than 30 days as required by Meta Platform Terms).

Once completed, all message text, voice/image attachments in private storage, and personal contact fields (`fullName`, `phoneNumber`, `emailAddress`, `deliveryAddress`) are permanently purged or anonymized, and an immutable confirmation record is written to `audit_logs`.