Option 1 — Self-service (fastest, recommended)
1. Log in at app.inboxchange.com.
2. Go to Settings → Account → Delete account.
3. Confirm by typing DELETE in the confirmation box.
4. Within 24 hours we permanently remove your account, all contacts, all message history, all templates, all billing records, and revoke any connected WhatsApp Business Account tokens. The deletion is irreversible — please export anything you want to keep before you confirm.
Option 2 — Email request
Email privacy@inboxchange.com from the address registered with your InboxChange account.
Subject: Data deletion request.
Body: name + company + (optional) reason for deletion. We acknowledge within 24 hours and complete the deletion within 7 business days. We may verify your identity before processing — required under DPDP Act and GDPR.
Option 3 — Revoke via Meta Business Manager
If you only want to disconnect WhatsApp (not delete your entire InboxChange account):
1. Go to business.facebook.com/settings → Business Integrations.
2. Find InboxChange in the list of connected apps.
3. Click Remove.
This immediately revokes our access to your WhatsApp Business Account. Within 30 days we also purge any cached WhatsApp message content from our database. Your InboxChange account itself remains active — only the WhatsApp integration is removed.
What gets deleted
Every database row tied to your account_id: users, contacts, conversations, messages, broadcasts, templates, leads, audiences, lists, integrations, sessions, API tokens, billing records (subscriptions, invoices, payments), audit log entries, and any uploaded files / CSV imports.
Encrypted Meta access tokens are deleted in the same transaction. WhatsApp message bodies are purged from disk within 24 hours. Aggregated, non-identifying metrics (e.g., 'X broadcasts sent in November 2026') may persist in anonymous form for product analytics — this data cannot be linked back to you.
We do not retain backups beyond 30 days, so 30 days after deletion the data is also gone from our nightly SQLite backups stored in S3 (the retention rotation handles this automatically).
Exceptions for legal compliance
If we are under a legal obligation to retain certain records (e.g., tax invoice records for 7 years under Indian GST law, or pending litigation), we will retain only the minimum necessary fields and notify you of the retention reason. Everything else still gets deleted.
If you are deleted from our database, we cannot recover your account or its history. Please be sure before you confirm.
Questions
Data Protection Officer: dpo@inboxchange.com — responds within 30 days, as required by DPDP / GDPR.
For general privacy questions: privacy@inboxchange.com.
For urgent escalations (compromised account, ongoing breach): security@inboxchange.com.
Questions? Email legal@inboxchange.com or use the contact form. For data-subject access requests (DPDP / GDPR), email dpo@inboxchange.com — we respond within 30 days.