SAM.AI by Carmaa — Legal
Data Deletion & Retention Policy
How long we keep data and how to request deletion — also the data-deletion URL required by Meta for WhatsApp/Graph API apps.
1. Who Can Request Deletion
- Business customers can request deletion of their account and Customer Data.
- End Users / Contacts (people whose data a business customer loaded into SAM.AI): because the business customer is the controller of that data, please ask that business to delete your data. If you contact us directly, we will forward your request to the relevant business customer and assist them as their processor.
2. How to Request Deletion
Email techcarmaa@gmail.com (or call +91 70425 55401) with:
- the account email / business name, and
- a description of what you want deleted (whole account, a specific Contact, specific data).
We may need to verify your identity before acting.
3. What Happens on an Account-Deletion Request
- We confirm the request and the scope.
- We provide an opportunity to export Customer Data (export window of 30 days from termination, unless you ask us to delete immediately).
- We deactivate the account and stop processing.
- We delete or irreversibly anonymise Customer Data from active systems in the ordinary course, typically within 30 days of the export window closing.
- Backups are deleted on their normal rotation cycle (typically within 35 days); during that window data in backups is inaccessible for ordinary use and is not restored except for disaster recovery.
- Connected-service tokens/keys (WhatsApp, Google, LinkedIn, AI provider) are revoked/deleted from our secret store.
4. Retention (What We Keep, and for How Long)
| Data | Retention |
|---|---|
| Customer Data (conversations, leads, bookings, media) | For the life of the account; deleted after the export/deletion window on termination (§3) |
| Account & profile | For the life of the account |
| Billing & tax records | As required by law (typically up to 8 years) |
| Security/operational logs | 30 days |
| Backups | Rolling cycle, typically 35 days |
We may retain limited data where required to comply with law, resolve disputes, prevent fraud/abuse, or enforce our agreements.
5. Connected Services
Deleting your SAM.AI data does not delete data held by Third-Party Services (e.g. messages stored in your WhatsApp Business account, your Google Calendar events, your LinkedIn posts, or logs at your AI provider). Manage those through the respective provider.
6. Contact
Email: techcarmaa@gmail.com · Phone: +91 70425 55401 · 197 Tea Estate, Near Bhadri Guest House, Banjarawala, Dehradun - 248001, Uttarakhand, India
Carmaa Technologies Private Limited · CIN: U45403UT2025PTC019812 · PAN: AANCC0341C · GSTIN: 05AANCC0341C1Z9
DPIIT Recognition No.: DIPP223487 · MSME (Udyam): UDYAM-UK-05-0116928
197 Tea Estate, Near Bhadri Guest House, Banjarawala, Dehradun – 248001, Uttarakhand, India
Email: techcarmaa@gmail.com · Phone: +91 70425 55401