Legal Document
Data Deletion Policy
ARTICLE I. PURPOSE AND LEGAL FRAMEWORK
This Policy gives effect to the right of erasure set out in Article 8 of Law 1581 of 2012 and Decree 1377 of 2013, and is to be read together with Kyzen's Privacy Policy. All references to "Kyzen" mean KYZEN A.I. S.A.S., domiciled in Barranquilla, Atlántico, Colombia.
ARTICLE II. ROLES IN DATA PROCESSING
With respect to the User's account data (name, email, workspace, phone), Kyzen acts as data controller. With respect to the data of the contacts or customers that the User enters or manages through the platform — including WhatsApp, Instagram, Messenger and Telegram conversations — Kyzen acts solely as data processor, with the User remaining the controller toward those data subjects.
ARTICLE III. SELF-SERVICE DELETION BY THE USER
The platform provides the User with tools to delete data permanently, immediately and irreversibly, without Kyzen's intervention: 3.1. Deleting an individual customer. A User with the Owner or Administrator role can open the "Customers" section, select the contact and choose "Delete". This permanently erases the contact and all of its associated data: conversations and messages, leads, sales, appointments, automated follow-ups, tasks, internal notes, activity logs and notifications. 3.2. Deleting the entire account (workspace). A User with the Owner role can go to "Settings" → "Danger zone" → "Delete workspace" and confirm by typing the workspace identifier. This permanently and irreversibly purges the entire workspace and its data: customers and contacts, conversations and messages, leads, sales, inventory, appointments, flows and automations, follow-ups, tasks, notes, connected channels, content, settings and team members. Both actions are final and cannot be recovered. Kyzen retains only a personal-data-free audit record (actor, date and number of records removed).
ARTICLE IV. DELETION UPON REQUEST
A User who prefers not to self-serve, or who no longer has access to the platform, may request erasure by emailing matt@kyzen.club from the address registered to their account. In accordance with Article 6 of the Privacy Policy, inquiries are answered within ten (10) business days and complaints within fifteen (15) business days.
ARTICLE V. THIRD-PARTY DATA-SUBJECT REQUESTS (THE USER'S CUSTOMERS)
Individuals who have messaged a business that uses Kyzen are data subjects whose data is controlled by that business (controller) and processed by Kyzen as processor. To request erasure, the data subject may: (i) contact the business they interacted with directly; or (ii) email matt@kyzen.club stating the WhatsApp, Instagram, Messenger or Telegram number or handle they used, in which case Kyzen will coordinate deletion with the relevant controller within the timeframes in Article IV.
ARTICLE VI. TECHNICAL SCOPE AND DELETION TIMEFRAMES
Data is removed from active systems immediately. Backups and residual records are deleted or anonymized within a maximum of sixty (60) business days, consistent with Article VIII of the Privacy Policy, unless a legal, accounting or contractual obligation requires longer retention, in which case the data is kept only for as long as strictly necessary to meet that obligation.
ARTICLE VII. DATA ORIGINATING FROM META / WHATSAPP
Data obtained through the WhatsApp Business API and other Meta Platforms Inc. services is deleted in accordance with the procedure described herein. This document constitutes the data deletion instructions required by Meta and will remain publicly available at kyzen.live/data-deletion.