Data Deletion

1. In short

Address for every request: mail@finebot.app. Subject line: «Personal data deletion».

2. You have a Finebot account

Some data you can delete yourself, without contacting us.

What you can delete in the dashboard

1. Open my.finebot.app and sign in.
2. A customer contact card: the Contacts section («Контакты» in the Russian interface), open the card, action «Удалить контакт». Contact notes and the product lines in that contact deals go with it.
3. A staff member and their access: Settings («Настройки»), the Team tab («Команда»), the delete button next to the person.
4. Products, categories, knowledge bases, scenarios, templates and campaigns: in the matching sections of the dashboard.

Deleting a contact is irreversible. The conversation, appointments and the deals themselves remain: to delete those as well, write to us, see below in this section.

What we delete on request

1. Write to mail@finebot.app from the email address the account is registered to.
2. State the company name and the workspace.
3. Say what to delete: the whole account with all data, or the conversation and appointments of a specific customer, or other specific data.
4. We confirm receipt and ask for details if we need them.

Deleting the entire account from the dashboard is not available yet, so we handle such requests manually by email.

3. You messaged a business

If you wrote to a company and a Finebot assistant answered, your data is stored in the workspace of that company. The company decides what it contains, and we hold the data as a third party.

Option one: through the company

1. Write to the company you were messaging, in the same messenger.
2. Ask them to delete your data.
3. The company deletes the contact card in its dashboard and passes the request to delete the conversation and appointments on to us.

Option two: through us

1. Write to mail@finebot.app.
2. State the phone number or the account name you messaged from, and the messenger: WhatsApp, Instagram or Telegram.
3. Name the company you were messaging, if you remember it.
4. We find the data, confirm the request, pass it to the company and delete the data on our side.

The phone number or account name is needed to find your data. Without it we cannot tell your conversation from a conversation that is not yours.

4. Removing Finebot in Facebook or Instagram

If you connected Finebot to your Facebook page, Instagram account or WhatsApp Business account, you can revoke that access in the Meta settings.

Business integrations: the main route

WhatsApp Business and professional Instagram accounts are connected through business login, so Finebot appears under business integrations rather than under personal apps.

1. Open your Facebook settings and go to «Business integrations».
2. Or open Business Manager and go to your business portfolio settings.
3. Find Finebot in the list of connected business integrations.
4. Press «Remove» and confirm.

If Finebot is not listed there, check the personal apps routes below.

Facebook

1. Open Facebook and go to «Settings and privacy», then «Settings».
2. Open the «Apps and websites» section.
3. Find Finebot in the list of connected apps.
4. Press «Remove» and confirm.

Instagram

A professional Instagram account is connected to Finebot through the same business login, so access is revoked in business integrations rather than in the «Apps and websites» section of Instagram itself, where Finebot will not appear.

If access was granted with a token the business created manually in Business Manager, it can only be revoked there, in the business portfolio settings. Write to us if you are not sure how the channel was connected.

Meta changes the location of these items from time to time. The current steps are described in the Facebook help article on connected apps.

Important. Removing the app cuts our access to your account and stops new messages from arriving. Data already stored in Finebot is not deleted by that action. To delete it as well, write to us at mail@finebot.app.

5. How we verify the request is yours

We do not release or delete data on an anonymous request, otherwise anyone could erase a conversation that is not theirs.

• Account owner: an email from the address the account is registered to.
• Staff member: an email from the work address listed in the account, or confirmation from the owner.
• End customer: a match of the phone number or account name with the conversation. If in doubt we send a short confirmation in the same messenger.

We do not ask for identity documents and do not store them.

6. Timelines

Where the periods come from: one working day is article 25 paragraph 2 subparagraph 8 of the Personal Data Protection Law of Kazakhstan. Fifteen working days for withdrawal of consent is article 8 paragraph 7 of the same Law. Three working days for information about your data and for a reasoned refusal is paragraph 16 of the Rules on collection and processing of personal data. The Law sets no period for deletion itself, so the fifteen working days there are our own commitment.

7. What exactly is deleted

Straight away in the dashboard

• The contact card: name, phone, email, company, position, profile photo, custom fields
• AI notes and staff notes on that contact
• Product lines and delivery fields in that contact deals, including the delivery address

By email to us

• The whole conversation for that contact: text, images, documents, voice messages and their transcripts
• Appointments together with comments and cancellation reasons
• Reminders and tasks linked to the contact
• Entries in the campaign log for that recipient
• A whole account: staff accounts, workspace settings, knowledge base, catalogue, scenarios, templates and channel connections

Deletion in the live system is irreversible. How backups are handled is stated in the Privacy Policy, section 13.

8. What stays and why

The law allows some data to be kept. Here is what and on what ground.

Article 41 paragraph 4 of the Digital Code of Kazakhstan lists the cases where a deletion request is not executed: protection of life, health and the rights of third parties, proceedings on offences, administration of justice and enforcement of court acts, public interest, state statistics and research subject to anonymisation, and the performance of state functions and services.

Paragraph 3 of the same article works separately. Where the law requires data to be kept, for example accounting records, we do not delete it, but on your request we restrict access to it and suspend its processing. The exceptions are an enforceable court act, obligations under law or contract, and archival storage.

9. What we cannot delete

• Messages held by WhatsApp, Instagram and Telegram. They are kept under the rules of those platforms, so contact them directly.
• Copies the business exported or synchronised into amoCRM or Bitrix24. Those are deleted by the business.
• Your own messages on your phone and on the phone of the person you wrote to.

We delete what is stored in Finebot and tell you exactly what was deleted.

10. If we refuse

A refusal always comes in writing and explains what was not deleted and on what ground.

You may appeal the refusal to the authorised body for personal data protection of the Republic of Kazakhstan or to a court.

11. Contacts

Individual entrepreneur Kozhevnikov, 121 Maylin street, Almaty, Kazakhstan. Email for deletion requests: mail@finebot.app.

The full description of data processing is in the Privacy Policy.