Data Deletion

In Refloat. Open Settings → Delete account in the web app or the mobile app and confirm; on the web you confirm by typing your business name. Your business’s records are deleted from our database immediately, and this cannot be undone. Photos, generated images, website files and reports held in file storage are removed within 30 days. If that business was the only one on your sign-in, your Refloat login is removed too.

By email. Write to support@refloat.in from the email address you signed in with, naming the business you want removed. We complete the deletion within 30 days and confirm by reply.

Deleting an account removes, for that business:

• your business profile, health scores, reports, POS records and logged sales;
• your catalogue, offers, generated posts and images, the photos you uploaded, and website builds;
• your WhatsApp conversations, message content, leads, campaigns, templates and opt-out list stored by Refloat, and your customers’ records;
• loyalty cards and rewards, Review QR feedback, and the business memory Refloat uses to keep drafts consistent;
• access tokens for every connected account (WhatsApp, Instagram, Facebook, Google Business Profile), which ends Refloat’s access to them.

These are not deleted: records we must keep under Indian law (such as invoices and tax records); reviews publicly published on Google, which we cache against your listing’s public Place ID rather than your account; raw message events received from Meta, which are removed 30 days after processing; and server logs, which are kept for a limited period.

You do not have to delete your account to remove a single customer. Email support@refloat.in from your registered address with the customer’s WhatsApp number (or the name on their record), and we will delete their conversation history, message content, lead record and loyalty card within 30 days.

If that customer had opted out of your marketing messages, we keep the single record of that opt-out. It contains nothing beyond the fact that this number must not be contacted, and it exists so their withdrawal of consent keeps being honoured.

Customers can also stop marketing messages themselves at any time by replying STOP to your WhatsApp number. That takes effect immediately and needs no action from you.

Disconnecting ends Refloat’s access; it does not delete your other data. Disconnect Instagram, Facebook or Google Business Profile from Profile → Connections, and WhatsApp from the WhatsApp card on your dashboard. The stored access token is deleted immediately, so Refloat can no longer publish, send messages, submit templates or otherwise act on that account for you.

Your WhatsApp Business account, phone number, approved message templates and billing relationship with Meta all stay with you. They are yours, not Refloat’s, and disconnecting does not change them.

Data already stored in Refloat, such as conversation history and the performance figures of past posts, is kept so your records stay intact. To remove it, delete your account or email us.

In Instagram, go to Settings → Apps and websites and remove Refloat. Instagram notifies us and we delete the stored credentials for that account automatically. If you send a data deletion request through Instagram, we return a confirmation code and a link where you can check the status of that request.

An account deletion you make in the app removes your records immediately and stored files within 30 days. Every request sent to support@refloat.in, whether for a whole account, a single customer or anything else, is completed within 30 days. Copies in encrypted backups are overwritten within 90 days.

If you are unhappy with how a request was handled, our Grievance Officer is reachable at the same address and responds within 30 days.